{"grype_matches":[{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77692","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-77692","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77692","cwe":"CWE-476","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77692","date":"2026-10-08","epss":0.06558,"percentile":0.93644}],"risk":4.9185,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-77692"},"relatedVulnerabilities":[{"id":"CVE-2026-77692","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77692","cwe":"CWE-476","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77692","date":"2026-10-08","epss":0.06558,"percentile":0.93644}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-77692"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77692","description":"An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77692","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-77692","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77692","cwe":"CWE-476","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77692","date":"2026-10-08","epss":0.06558,"percentile":0.93644}],"risk":4.9185,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-77692"},"relatedVulnerabilities":[{"id":"CVE-2026-77692","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77692","cwe":"CWE-476","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77692","date":"2026-10-08","epss":0.06558,"percentile":0.93644}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-77692"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77692","description":"An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63076","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63076","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"risk":1.2015,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63076"},"relatedVulnerabilities":[{"id":"CVE-2026-63076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"urls":["https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63076","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63076","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"risk":1.2015,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63076"},"relatedVulnerabilities":[{"id":"CVE-2026-63076","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63076","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63076","date":"2026-10-08","epss":0.01602,"percentile":0.75073}],"urls":["https://github.com/openssl/openssl/commit/37882aa2e0256e1072442a8f62f7db45b995c45b","https://github.com/openssl/openssl/commit/a17cc8d612ecff6d94a9b7ca8b5283ddf5ff570e","https://github.com/openssl/openssl/commit/a1f348ccb328c3afbd4ba6883f9b7c813c043259","https://github.com/openssl/openssl/commit/a7af46a92d0ce19a90e669ef56d2576a07924226","https://github.com/openssl/openssl/commit/cdacfff557389abfa9e4615abded2ec984517d6c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076","description":"Issue summary: OpenSSL CMP password based protection verification only\nchecks whether the protectionAlg parameter was not NULL and not its\nASN.1 type, before treating it as a PBMParameter. A crafted message can\ncontain a parameter of a different type, which is then dereferenced as an\ninvalid pointer.\n\nImpact summary: A remote, unauthenticated attacker can crash an application\nacting as a CMP server that accepts PBM-protected messages, or a CMP client\ntalking to a malicious or intercepted CMP server, resulting in a Denial of\nService.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: When verifying the password-based MAC protection of a CMP\nmessage, OpenSSL library reads the protectionAlg algorithm parameter with\nX509_ALGOR_get0(), which returns both the parameter type and its value\npointer. The value is then cast to an ASN1_STRING and treated as the\nexpected PBMParameter after only checking that pointer is not NULL. The\nparameter type returned by X509_ALGOR_get0() was never consulted.\n\nThis happens during protection verification, before any MAC is computed, so\nno knowledge of the PBM shared secret is required; the only precondition is\nthat PBM verification is reachable. On the server side this is reached from\nOSSL_CMP_SRV_process_request() for any application that stands up a CMP\nserver accepting PBM-protected messages, and on the client side from CMP\nresponse validation against a malicious or on-path (MITM) server. The\nreliable consequence is a denial of service; there is no memory disclosure,\nno controlled memory write, and no path to code execution. CMP is a\nspecialized feature that an application must explicitly enable.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18798","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-18798","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18798","cwe":"CWE-415","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-18798","date":"2026-10-08","epss":0.01537,"percentile":0.74104}],"risk":1.15275,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-18798"},"relatedVulnerabilities":[{"id":"CVE-2026-18798","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18798","cwe":"CWE-415","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-18798","date":"2026-10-08","epss":0.01537,"percentile":0.74104}],"urls":["https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af","https://github.com/openssl/openssl/commit/967582d5037f01a26b6d19beae19af62a1b15c3c","https://github.com/openssl/openssl/commit/a14a1deac403522fbeafabcb198503cf6caa7dc4","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18798","description":"Issue summary: QUIC server may double free QRX (QUIC record layer RX) object\nwhen channel creation fails for initial packet.\n\nImpact summary: Double free leads to heap corruption, which typically results in \ntermination of QUIC server process, leading to Denial of Service. There is so\nfar no evidence that this double free is exploitable for remote code execution,\nthus it is considered highly improbable.\n\nCWE: CWE-415: Double Free\n\nDescription: In order to validate initial packet, OpenSSL QUIC stack default\npacket handler (port_default_packet_handler()) creates a so-called QRX object.\nIf the initial packet validates successfully with QRX object, the default packet\nhandler proceeds to channel (connection object) creation. The QRX object used\nfor packet validation is passed to port_bind_channel(), so it becomes part of\nthe newly created connection. If port_bind_channel() fails, then it also frees\nthe QRX object. Once port_bind_channel() returns, the port_default_packet_handler()\ndetects the failure and proceeds to the error branch, where the same QRX object is\nfreed for the second time.\n\nThe failure in port_bind_channel() function can be induced with a relatively\nlow effort by a malformed (non RFC 9000 compliant) INITIAL packet. If the packet\ncarries DCID (destination connection ID) which is shorter than 8 bytes, then\nport_bind_channel() jumps to the error path after ossl_quic_lcidm_enrol_odcid()\ndetects that the DCID has invalid length.\n\nFIPS impact: no\nThe FIPS module is not affected, as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-18798","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-18798","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18798","cwe":"CWE-415","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-18798","date":"2026-10-08","epss":0.01537,"percentile":0.74104}],"risk":1.15275,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-18798"},"relatedVulnerabilities":[{"id":"CVE-2026-18798","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18798","cwe":"CWE-415","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-18798","date":"2026-10-08","epss":0.01537,"percentile":0.74104}],"urls":["https://github.com/openssl/openssl/commit/70cebd74d3592f5272945501b58a60374c4e13af","https://github.com/openssl/openssl/commit/967582d5037f01a26b6d19beae19af62a1b15c3c","https://github.com/openssl/openssl/commit/a14a1deac403522fbeafabcb198503cf6caa7dc4","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18798","description":"Issue summary: QUIC server may double free QRX (QUIC record layer RX) object\nwhen channel creation fails for initial packet.\n\nImpact summary: Double free leads to heap corruption, which typically results in \ntermination of QUIC server process, leading to Denial of Service. There is so\nfar no evidence that this double free is exploitable for remote code execution,\nthus it is considered highly improbable.\n\nCWE: CWE-415: Double Free\n\nDescription: In order to validate initial packet, OpenSSL QUIC stack default\npacket handler (port_default_packet_handler()) creates a so-called QRX object.\nIf the initial packet validates successfully with QRX object, the default packet\nhandler proceeds to channel (connection object) creation. The QRX object used\nfor packet validation is passed to port_bind_channel(), so it becomes part of\nthe newly created connection. If port_bind_channel() fails, then it also frees\nthe QRX object. Once port_bind_channel() returns, the port_default_packet_handler()\ndetects the failure and proceeds to the error branch, where the same QRX object is\nfreed for the second time.\n\nThe failure in port_bind_channel() function can be induced with a relatively\nlow effort by a malformed (non RFC 9000 compliant) INITIAL packet. If the packet\ncarries DCID (destination connection ID) which is shorter than 8 bytes, then\nport_bind_channel() jumps to the error path after ossl_quic_lcidm_enrol_odcid()\ndetects that the DCID has invalid length.\n\nFIPS impact: no\nThe FIPS module is not affected, as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63073","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63073","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63073","cwe":"CWE-134","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63073","date":"2026-10-08","epss":0.01159,"percentile":0.66134}],"risk":1.08946,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63073"},"relatedVulnerabilities":[{"id":"CVE-2026-63073","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63073","cwe":"CWE-134","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63073","date":"2026-10-08","epss":0.01159,"percentile":0.66134}],"urls":["https://github.com/openssl/openssl/commit/0cc20b322639919aa423e90799d9a57c3b4b76ca","https://github.com/openssl/openssl/commit/6a0acc072b4d37a7cac1252a29c1ce1f00c5ec29","https://github.com/openssl/openssl/commit/7eb2e3ec9d1d4f35c8022fccd4b03398b3f33e21","https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63073","description":"Issue summary: OpenSSL CMP response validation passed an unexpected response\nsender distinguished name directly as the format string to `ERR_raise_data()`.\n\nImpact summary: A malicious or intercepted CMP endpoint can crash a CMP client\nthat enforces an expected sender or uses a pinned server certificate whose\nsubject becomes the default expected sender.\n\nCWE: CWE-134 (Use of Externally-Controlled Format String)\n\nDescription: When validating a received CMP message, ossl_cmp_msg_check_update()\nconverts the peer-supplied sender distinguished name with X509_NAME_oneline()\nand passes it directly as the format argument to ERR_raise_data(). Percent\ncharacters survive the conversion, so a sender DN such as \"CN=%s%n\" reaches\nBIO_vsnprintf() as an attacker-controlled format string with no matching variadic\narguments. This path is only reached when the caller configures an expected\nsender or pins a server certificate, which is the normal configuration for a\nCMP client validating server responses.\n\nSince the attacker controls the format string but none of the variadic\narguments, such specifiers as %s and %n dereference or write through unrelated\nstack contents and crash the client. The reliable consequence is a denial of\nservice, when the response comes from a malicious or intercepted CMP endpoint.\nThere is no controlled memory write, arbitrary-address read, or reliable path\nto remote code execution.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63073","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63073","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63073","cwe":"CWE-134","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63073","date":"2026-10-08","epss":0.01159,"percentile":0.66134}],"risk":1.08946,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63073"},"relatedVulnerabilities":[{"id":"CVE-2026-63073","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","metrics":{"baseScore":9.8,"impactScore":5.9,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63073","cwe":"CWE-134","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63073","date":"2026-10-08","epss":0.01159,"percentile":0.66134}],"urls":["https://github.com/openssl/openssl/commit/0cc20b322639919aa423e90799d9a57c3b4b76ca","https://github.com/openssl/openssl/commit/6a0acc072b4d37a7cac1252a29c1ce1f00c5ec29","https://github.com/openssl/openssl/commit/7eb2e3ec9d1d4f35c8022fccd4b03398b3f33e21","https://github.com/openssl/openssl/commit/a7e5a6eea8fd3ccca6b6fbba031a5fbf8a3d93b4","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63073","description":"Issue summary: OpenSSL CMP response validation passed an unexpected response\nsender distinguished name directly as the format string to `ERR_raise_data()`.\n\nImpact summary: A malicious or intercepted CMP endpoint can crash a CMP client\nthat enforces an expected sender or uses a pinned server certificate whose\nsubject becomes the default expected sender.\n\nCWE: CWE-134 (Use of Externally-Controlled Format String)\n\nDescription: When validating a received CMP message, ossl_cmp_msg_check_update()\nconverts the peer-supplied sender distinguished name with X509_NAME_oneline()\nand passes it directly as the format argument to ERR_raise_data(). Percent\ncharacters survive the conversion, so a sender DN such as \"CN=%s%n\" reaches\nBIO_vsnprintf() as an attacker-controlled format string with no matching variadic\narguments. This path is only reached when the caller configures an expected\nsender or pins a server certificate, which is the normal configuration for a\nCMP client validating server responses.\n\nSince the attacker controls the format string but none of the variadic\narguments, such specifiers as %s and %n dereference or write through unrelated\nstack contents and crash the client. The reliable consequence is a denial of\nservice, when the response comes from a malicious or intercepted CMP endpoint.\nThere is no controlled memory write, arbitrary-address read, or reliable path\nto remote code execution.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-14457","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-14457","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14457","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14457","date":"2026-10-08","epss":0.01021,"percentile":0.62327}],"risk":0.76575,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-14457"},"relatedVulnerabilities":[{"id":"CVE-2026-14457","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14457","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14457","date":"2026-10-08","epss":0.01021,"percentile":0.62327}],"urls":["https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76","https://github.com/openssl/openssl/commit/581aaa0f0a35d214740f0fe1f5283ec41f1212e1","https://github.com/openssl/openssl/commit/d0af20478688a6aa2f59d61caa3f82136b181d7f","https://github.com/openssl/openssl/commit/dad836b071da6579510c968615848ba03cac593b","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14457","description":"Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs)\nenabled, and only the private key (with no associated certificate) configured locally,\na NULL pointer dereference may occur when the remote peer solicits raw public keys and\nalso sends the typically omitted \"signature_algorithms_cert\" TLS extension.\n\nImpact summary: The impact is limited to a possible Denial of Service as a result of\nan application abort, no data disclosure or remote command execution are possible.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: While a passing comment in sample code in the documentation suggests\nthat key-only RPK configurations are supported, the best-practice RPK configuration\nis to always configure a corresponding certificate (possibly self-signed or\nsigned by any convenient CA).\n\nWhen the private key is configured along with a matching certificate, the\n\"signature_algorithms_cert\" extension is handled reliably even without the\nfix, and peer clients or servers that don't support raw public keys may be\nable to complete a TLS connection by pinning or verifying the corresponding\ncertificate or its public key.\n\nDeployments that prefer to configure just a private key with no certificate\nneed to upgrade to an updated release as noted below.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the SSL protocol implementation\nis outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-14457","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-14457","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14457","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14457","date":"2026-10-08","epss":0.01021,"percentile":0.62327}],"risk":0.76575,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-14457"},"relatedVulnerabilities":[{"id":"CVE-2026-14457","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14457","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14457","date":"2026-10-08","epss":0.01021,"percentile":0.62327}],"urls":["https://github.com/openssl/openssl/commit/1e8c398db67404babd3e5af999bb6bd86f720c76","https://github.com/openssl/openssl/commit/581aaa0f0a35d214740f0fe1f5283ec41f1212e1","https://github.com/openssl/openssl/commit/d0af20478688a6aa2f59d61caa3f82136b181d7f","https://github.com/openssl/openssl/commit/dad836b071da6579510c968615848ba03cac593b","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14457","description":"Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs)\nenabled, and only the private key (with no associated certificate) configured locally,\na NULL pointer dereference may occur when the remote peer solicits raw public keys and\nalso sends the typically omitted \"signature_algorithms_cert\" TLS extension.\n\nImpact summary: The impact is limited to a possible Denial of Service as a result of\nan application abort, no data disclosure or remote command execution are possible.\n\nCWE: CWE-476: NULL Pointer Dereference\n\nDescription: While a passing comment in sample code in the documentation suggests\nthat key-only RPK configurations are supported, the best-practice RPK configuration\nis to always configure a corresponding certificate (possibly self-signed or\nsigned by any convenient CA).\n\nWhen the private key is configured along with a matching certificate, the\n\"signature_algorithms_cert\" extension is handled reliably even without the\nfix, and peer clients or servers that don't support raw public keys may be\nable to complete a TLS connection by pinning or verifying the corresponding\ncertificate or its public key.\n\nDeployments that prefer to configure just a private key with no certificate\nneed to upgrade to an updated release as noted below.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue, as the SSL protocol implementation\nis outside the OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"risk":0.6869999999999999,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63072"},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63072","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63072","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"risk":0.6869999999999999,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63072"},"relatedVulnerabilities":[{"id":"CVE-2026-63072","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63072","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63072","date":"2026-10-08","epss":0.00916,"percentile":0.58982}],"urls":["https://github.com/openssl/openssl/commit/2a3dac874c8057c1f0186849bf1ede1ae7b6b756","https://github.com/openssl/openssl/commit/87784ad619af36b8807c2044b3940006fccc1e42","https://github.com/openssl/openssl/commit/9530a5fd1aacaeccdced4478ea2340a480613335","https://github.com/openssl/openssl/commit/9ec2f6d2ae2bcad907cf7ee38584855bafe4979a","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072","description":"Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63075","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63075","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63075","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63075","date":"2026-10-08","epss":0.00778,"percentile":0.5448}],"risk":0.5835,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63075"},"relatedVulnerabilities":[{"id":"CVE-2026-63075","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63075","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63075","date":"2026-10-08","epss":0.00778,"percentile":0.5448}],"urls":["https://github.com/openssl/openssl/commit/7308946576b12e64b8be53bcf0a120354b2b42bc","https://github.com/openssl/openssl/commit/7c98d79738549df92868e7dd9be4bbf061eed709","https://github.com/openssl/openssl/commit/bf84721c2548351176e367e6de505792f0118dc6","https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63075","description":"Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly\nsends ack-eliciting packets while not acknowledging ACK-only responses, the\nQUIC stack can retain ACK-only packet metadata for the lifetime of the\nconnection.\n\nImpact summary: A remote peer that can complete a QUIC handshake can\ncause connection-scoped memory growth which may lead to Denial of Service\nthrough memory exhaustion, especially with sustained traffic or many concurrent\nQUIC connections.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: When the OpenSSL QUIC stack sends an ACK-only packet,\nthere is no requirement by the QUIC protocol that the peer will acknowledge\nthat ACK-only packet (i.e. it is itself not ack-eliciting). However, the OpenSSL\nimplementation stores the metadata about the ACK frames regardless.\nIn and of itself that's ok, but if a malicious peer establishes a connection, and\nthen drives the connection such that ACK-only packets are forced from the \nOpenSSL implementation peer (i.e., by sending numerous PING frames),\nand then withholding any subsequent acks for ack-eliciting data, like\nlegitimate data, said malicious peer can force inappropriate memory growth\non the OpenSSL peer, potentially leading to a Denial of Service.\n\nThe fix is to ensure that we account for the transmission of the ACK-only\npacket in the packet histories high and low watermark without actually storing\nthe ACK-only packet metadata itself.\n\nFIPS impact: no\nThe OpenSSL FIPS module is not affected as the QUIC code is\noutside the FIPS module boundary."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63075","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63075","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63075","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63075","date":"2026-10-08","epss":0.00778,"percentile":0.5448}],"risk":0.5835,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63075"},"relatedVulnerabilities":[{"id":"CVE-2026-63075","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63075","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63075","date":"2026-10-08","epss":0.00778,"percentile":0.5448}],"urls":["https://github.com/openssl/openssl/commit/7308946576b12e64b8be53bcf0a120354b2b42bc","https://github.com/openssl/openssl/commit/7c98d79738549df92868e7dd9be4bbf061eed709","https://github.com/openssl/openssl/commit/bf84721c2548351176e367e6de505792f0118dc6","https://github.com/openssl/openssl/commit/c902e5f16d6a9e130e96d3ca6d8f64d71652e393","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63075","description":"Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly\nsends ack-eliciting packets while not acknowledging ACK-only responses, the\nQUIC stack can retain ACK-only packet metadata for the lifetime of the\nconnection.\n\nImpact summary: A remote peer that can complete a QUIC handshake can\ncause connection-scoped memory growth which may lead to Denial of Service\nthrough memory exhaustion, especially with sustained traffic or many concurrent\nQUIC connections.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: When the OpenSSL QUIC stack sends an ACK-only packet,\nthere is no requirement by the QUIC protocol that the peer will acknowledge\nthat ACK-only packet (i.e. it is itself not ack-eliciting). However, the OpenSSL\nimplementation stores the metadata about the ACK frames regardless.\nIn and of itself that's ok, but if a malicious peer establishes a connection, and\nthen drives the connection such that ACK-only packets are forced from the \nOpenSSL implementation peer (i.e., by sending numerous PING frames),\nand then withholding any subsequent acks for ack-eliciting data, like\nlegitimate data, said malicious peer can force inappropriate memory growth\non the OpenSSL peer, potentially leading to a Denial of Service.\n\nThe fix is to ensure that we account for the transmission of the ACK-only\npacket in the packet histories high and low watermark without actually storing\nthe ACK-only packet metadata itself.\n\nFIPS impact: no\nThe OpenSSL FIPS module is not affected as the QUIC code is\noutside the FIPS module boundary."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-14456","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-14456","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14456","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14456","date":"2026-10-08","epss":0.00729,"percentile":0.52813}],"risk":0.5467500000000001,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-14456"},"relatedVulnerabilities":[{"id":"CVE-2026-14456","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14456","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14456","date":"2026-10-08","epss":0.00729,"percentile":0.52813}],"urls":["https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9","https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b","https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139","https://openssl-library.org/news/secadv/20260813.txt","http://www.openwall.com/lists/oss-security/2026/08/13/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14456","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-14456","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-14456","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14456","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14456","date":"2026-10-08","epss":0.00729,"percentile":0.52813}],"risk":0.5467500000000001,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-14456"},"relatedVulnerabilities":[{"id":"CVE-2026-14456","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-14456","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-14456","date":"2026-10-08","epss":0.00729,"percentile":0.52813}],"urls":["https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9","https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b","https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139","https://openssl-library.org/news/secadv/20260813.txt","http://www.openwall.com/lists/oss-security/2026/08/13/4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-14456","description":"Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54874","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-54874","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"risk":0.46649999999999997,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-54874"},"relatedVulnerabilities":[{"id":"CVE-2026-54874","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"urls":["https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-54874","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-54874","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"risk":0.46649999999999997,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-54874"},"relatedVulnerabilities":[{"id":"CVE-2026-54874","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54874","cwe":"CWE-405","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54874","date":"2026-10-08","epss":0.00622,"percentile":0.48184}],"urls":["https://github.com/openssl/openssl/commit/4808b5d64176451f3d93d87d0ac9c81a9b13fb23","https://github.com/openssl/openssl/commit/7110cb2f75806d0bf809eb2f90790d477900be40","https://github.com/openssl/openssl/commit/a0c8ec557d9cac078f032d76cdf684fe743eb382","https://github.com/openssl/openssl/commit/cc0c6710917cd5eec001b297355d2ba723505107","https://github.com/openssl/openssl/commit/f52ffc11b90737ac89083909618dc2e1f42c561c","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874","description":"Issue summary: Receiving a DTLS record for a future epoch while a handshake\nis in progress causes OpenSSL to buffer far more memory than the record\nitself requires.\n\nImpact summary: A peer can use a small amount of network traffic to make an\nOpenSSL DTLS endpoint retain a disproportionately large amount of memory,\nwhich may lead to a Denial of Service.\n\nCWE: CWE-405: Asymmetric Resource Consumption (Amplification)\n\nDescription: While a DTLS handshake is in progress, a peer may legitimately\nhave already moved on to the next epoch (for example, having sent its\nChangeCipherSpec and Finished messages) before the local endpoint has\nprocessed the same transition, typically because of reordering on the\nunderlying UDP transport. OpenSSL buffers such early records so that they\ncan be processed once the local endpoint catches up.\n\nBuffering a record currently retains the entire read buffer it arrived in,\nwhich is sized to hold the largest possible DTLS record (around 16\nkilobytes), rather than just the bytes that make up the record itself. Up\nto 100 such records may be buffered per connection. As a result, a peer\nthat sends a stream of small forged records claiming to belong to the next\nepoch can cause an OpenSSL DTLS endpoint to retain around 1.7 megabytes of\nmemory, despite sending only a small fraction of that amount of data over\nthe network.\n\nAn attacker therefore gains a memory amplification factor of around 1200,\nand can multiply the effect across as many associations as it is able to\nopen, making this a remote memory exhaustion Denial of Service risk for\nDTLS servers. Since the memory retained per connection remains bounded,\nand any limit an application already places on the number of concurrent\nassociations also bounds the total exposure, this issue has been assessed\nas Low severity.\n\nFIPS impact: no\n\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary.\n\nOpenSSL 4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1 and 1.0.2 are vulnerable to this\nissue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.2.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.4.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.8.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.7.\nOpenSSL 3.0 users should upgrade to OpenSSL 3.0.22.\n\nPremium support customers only:\nOpenSSL 1.1.1 users should upgrade to OpenSSL 1.1.1zi\nOpenSSL 1.0.2 users should upgrade to OpenSSL 1.0.2zr\n\nThis issue was reported on 18 May 2026 by Amazon Web Services.\nThe fix has been developed by Matt Caswell.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Amazon Web Services\nFixed by: Matt Caswell"}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19666","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19666","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19666","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19666","date":"2026-10-08","epss":0.00569,"percentile":0.4536}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19666"},"relatedVulnerabilities":[{"id":"CVE-2026-19666","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19666","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19666","date":"2026-10-08","epss":0.00569,"percentile":0.4536}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19666"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19666","description":"On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19666","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19666","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19666","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19666","date":"2026-10-08","epss":0.00569,"percentile":0.4536}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19666"},"relatedVulnerabilities":[{"id":"CVE-2026-19666","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19666","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19666","date":"2026-10-08","epss":0.00569,"percentile":0.4536}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19666"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19666","description":"On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19667","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19667","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19667","cwe":"CWE-197","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19667","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19667"},"relatedVulnerabilities":[{"id":"CVE-2026-19667","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19667","cwe":"CWE-197","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19667","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19667"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19667","description":"If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-76163","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-76163","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76163","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-76163","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-76163"},"relatedVulnerabilities":[{"id":"CVE-2026-76163","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76163","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-76163","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-76163"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-76163","description":"If BIND is loaded with a \"`named.conf`\" file that contains no global \"`options`\" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80274","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-80274","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80274","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-80274","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-80274"},"relatedVulnerabilities":[{"id":"CVE-2026-80274","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80274","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-80274","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-80274"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-81563","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-81563","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81563","cwe":"CWE-401","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81563","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-81563"},"relatedVulnerabilities":[{"id":"CVE-2026-81563","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81563","cwe":"CWE-401","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81563","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-81563"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-81563","description":"A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19667","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19667","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19667","cwe":"CWE-197","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19667","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19667"},"relatedVulnerabilities":[{"id":"CVE-2026-19667","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19667","cwe":"CWE-197","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19667","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19667"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19667","description":"If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-76163","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-76163","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76163","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-76163","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-76163"},"relatedVulnerabilities":[{"id":"CVE-2026-76163","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-76163","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-76163","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-76163"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-76163","description":"If BIND is loaded with a \"`named.conf`\" file that contains no global \"`options`\" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit.\nThis issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-80274","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-80274","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80274","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-80274","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-80274"},"relatedVulnerabilities":[{"id":"CVE-2026-80274","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-80274","cwe":"CWE-617","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-80274","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-80274"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274","description":"If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-81563","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-81563","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81563","cwe":"CWE-401","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81563","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-81563"},"relatedVulnerabilities":[{"id":"CVE-2026-81563","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81563","cwe":"CWE-401","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81563","date":"2026-10-08","epss":0.00569,"percentile":0.45359}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-81563"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-81563","description":"A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-81736","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-81736","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81736","cwe":"CWE-1050","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81736","date":"2026-10-08","epss":0.00569,"percentile":0.45358}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-81736"},"relatedVulnerabilities":[{"id":"CVE-2026-81736","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81736","cwe":"CWE-1050","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81736","date":"2026-10-08","epss":0.00569,"percentile":0.45358}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-81736"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-81736","description":"If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-81736","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-81736","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81736","cwe":"CWE-1050","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81736","date":"2026-10-08","epss":0.00569,"percentile":0.45358}],"risk":0.42674999999999996,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-81736"},"relatedVulnerabilities":[{"id":"CVE-2026-81736","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-81736","cwe":"CWE-1050","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-81736","date":"2026-10-08","epss":0.00569,"percentile":0.45358}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-81736"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-81736","description":"If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69650","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69650","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69650","date":"2026-10-08","epss":0.00522,"percentile":0.42476}],"risk":0.3915,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","description":"GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58469","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58469","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58469","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58469","date":"2026-10-08","epss":0.00493,"percentile":0.4041}],"risk":0.38454000000000005,"urls":["https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-underread-via-metalink-url-parsing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58469","description":"GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54873","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54873","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-08","epss":0.00462,"percentile":0.38098}],"risk":0.34650000000000003,"urls":["https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54873","description":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54873","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54873","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54873","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54873","date":"2026-10-08","epss":0.00462,"percentile":0.38098}],"risk":0.34650000000000003,"urls":["https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23","https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53","https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb","https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54873","description":"Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"73b572b83dbf267a","cpes":["cpe:2.3:a:libexpat:libexpat:2.8.4-r0:*:*:*:*:*:*:*"],"name":"libexpat","purl":"pkg:apk/alpine/libexpat@2.8.4-r0?arch=x86_64&distro=alpine-3.24.1&upstream=expat","type":"apk","version":"2.8.4-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libexpat.so.1"},{"path":"/usr/lib/libexpat.so.1.12.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"expat"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.8.5-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-93990","versionConstraint":"< 2.8.5-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"expat","version":"2.8.4-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-93990","fix":{"state":"fixed","versions":["2.8.5-r0"],"available":[{"date":"2026-09-24","kind":"first-observed","version":"2.8.5-r0"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93990","cwe":"CWE-176","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-93990","date":"2026-10-08","epss":0.00403,"percentile":0.32479}],"risk":0.32642999999999994,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-93990"},"relatedVulnerabilities":[{"id":"CVE-2026-93990","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-93990","cwe":"CWE-176","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-93990","date":"2026-10-08","epss":0.00403,"percentile":0.32479}],"urls":["https://blog.hartwork.org/posts/expat-2-8-5-released/","https://github.com/libexpat/libexpat","https://github.com/libexpat/libexpat/commit/ff6e1d7e750bbe245178f51a47a965dc8342861a","https://github.com/libexpat/libexpat/pull/1282","https://github.com/libexpat/libexpat/releases/tag/R_2_8_5","https://www.vulncheck.com/advisories/expat-through-2.8.4-malformed-utf-16-acceptance-via-unchecked-surrogate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-93990","description":"Expat before 2.8.5 fails to validate that a high surrogate in UTF-16 input is followed by a low surrogate, allowing malformed UTF-16 sequences to be accepted. Attackers can supply UTF-16 encoded XML containing lone high surrogates that consume the following code unit, causing Expat to pass unpaired surrogates to applications built with XML_UNICODE and to silently replace input characters in other builds."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63074","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63074","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63074","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63074","date":"2026-10-08","epss":0.00588,"percentile":0.46424}],"risk":0.32046,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63074"},"relatedVulnerabilities":[{"id":"CVE-2026-63074","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63074","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63074","date":"2026-10-08","epss":0.00588,"percentile":0.46424}],"urls":["https://github.com/openssl/openssl/commit/01e567978a55fba18142a230380c31296049fae7","https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f","https://github.com/openssl/openssl/commit/74ae7f6df47a5767c1010b88c47507dfc5b32c46","https://github.com/openssl/openssl/commit/75360af9650d4e0c82ba0050c5c9912cd79e54af","https://github.com/openssl/openssl/commit/f636f9ca0fa1bae5b42f9e787f025c96fb09c43a","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63074","description":"Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\nadditional certificates (extraCerts) sent in a CMP message, but never expunges\nthem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\nfrequently, this cache of extraCerts may grow unboundedly, and a malicious\nclient may flood a CMP server with requests driving this growth.\n\nImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\nfor the lifetime of a server process may observe unbounded memory growth in the\nevent a malicious client repeatedly sends requests containing unique extra\ncertificates, which may lead to OOM conditions.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: If a remote user sends CMP messages to a server with a list of\nextraCerts and the message is rejected, the extraCerts from the message remains\nin the server contexts untrusted certificate stack.  This exposes servers with\nlong lived ctx objects to Denial of Service attacks in which an attacker sends\nmessages intending to be rejected with a large list of additional certificates\nrepeatedly, forcing the server to store them indefinitely.\n   \nThe issue was fixed by removing the added extra certs if the message is\nrejected, using the same method as when the context is configured to not do\ncaching at all.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-63074","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-63074","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63074","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63074","date":"2026-10-08","epss":0.00588,"percentile":0.46424}],"risk":0.32046,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-63074"},"relatedVulnerabilities":[{"id":"CVE-2026-63074","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-63074","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-63074","date":"2026-10-08","epss":0.00588,"percentile":0.46424}],"urls":["https://github.com/openssl/openssl/commit/01e567978a55fba18142a230380c31296049fae7","https://github.com/openssl/openssl/commit/21a5d9658b0c66daace60e10ea18ff32a448de9f","https://github.com/openssl/openssl/commit/74ae7f6df47a5767c1010b88c47507dfc5b32c46","https://github.com/openssl/openssl/commit/75360af9650d4e0c82ba0050c5c9912cd79e54af","https://github.com/openssl/openssl/commit/f636f9ca0fa1bae5b42f9e787f025c96fb09c43a","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-63074","description":"Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches\nadditional certificates (extraCerts) sent in a CMP message, but never expunges\nthem (for instance if they are invalid).  If a server reuses an OSSL_CMP_CTX\nfrequently, this cache of extraCerts may grow unboundedly, and a malicious\nclient may flood a CMP server with requests driving this growth.\n\nImpact summary: Users utilizing a CMP server that reuses a single OSSL_CMP_CTX\nfor the lifetime of a server process may observe unbounded memory growth in the\nevent a malicious client repeatedly sends requests containing unique extra\ncertificates, which may lead to OOM conditions.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: If a remote user sends CMP messages to a server with a list of\nextraCerts and the message is rejected, the extraCerts from the message remains\nin the server contexts untrusted certificate stack.  This exposes servers with\nlong lived ctx objects to Denial of Service attacks in which an attacker sends\nmessages intending to be rejected with a large list of additional certificates\nrepeatedly, forcing the server to store them indefinitely.\n   \nThe issue was fixed by removing the added extra certs if the message is\nrejected, using the same method as when the context is configured to not do\ncaching at all.\n\nFIPS impact: no\nAs the CMP code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84782","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-08","epss":0.0039,"percentile":0.31045}],"risk":0.30615,"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84782","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84782","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","metrics":{"baseScore":8.2,"impactScore":4.3,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84782","cwe":"CWE-125","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84782","date":"2026-10-08","epss":0.0039,"percentile":0.31045}],"risk":0.30615,"urls":["https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943","https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628","https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58","https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84782","description":"Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84784","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84784","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84784","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84784","date":"2026-10-08","epss":0.00403,"percentile":0.32493}],"risk":0.30225,"urls":["https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a","https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806","https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f","https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84784","description":"Issue summary: A malicious remote peer may flood the local QUIC\nstack with NEW_CONNECTION_ID frames by avoiding a limit check on\nhow many connection IDs the remote QUIC stack can use.\n\nImpact summary: The local QUIC stack sends a RETIRE_CONN_ID frame\nfor every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID\nframe is dispatched via the Control Frame Queue (CFQ). If the remote\npeer also withholds ACKs, then it can force the local stack\nto allocate ~400MB (depending on ACK delay).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism\nby which a remote peer can notify the local QUIC stack to change the\ndestination connection ID (a.k.a. CID) the local stack uses to\nidentify the connection at the remote peer. Each CID is associated\nwith a sequence number. The sequence number is transmitted\nin NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID\nwhich is being either associated with a connection or retired.\n\nThe remote peer sends a NEW_CONNECTION_ID frame to let the local stack know\na new CID is being associated with an existing connection. The\nNEW_CONNECTION_ID frame carries the new CID, its sequence number, and the\nretire-prior-to number. The retire-prior-to identifies existing\nCIDs that are to be retired. The local QUIC stack must send a\nRETIRE_CONNECTION_ID for every destination CID whose sequence number\nis less than retire-prior-to. The CID becomes retired after the\nlocal stack receives an ACK for its RETIRE_CONNECTION_ID frame.\n\nAlthough the OpenSSL QUIC stack supports at most one destination CID\nfor every connection, it can be tricked into processing more than\none RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC\nstack currently retires the destination CID as soon as it receives\nthe NEW_CONNECTION_ID, while in fact the destination CID must\nbe retired after an ACK for the RETIRE_CONNECTION_ID frame is received.\nCorrecting the flawed logic also fixes the backlog growth.\n\n[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-84784","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-84784","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-84784","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-84784","date":"2026-10-08","epss":0.00403,"percentile":0.32493}],"risk":0.30225,"urls":["https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a","https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806","https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f","https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-84784","description":"Issue summary: A malicious remote peer may flood the local QUIC\nstack with NEW_CONNECTION_ID frames by avoiding a limit check on\nhow many connection IDs the remote QUIC stack can use.\n\nImpact summary: The local QUIC stack sends a RETIRE_CONN_ID frame\nfor every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID\nframe is dispatched via the Control Frame Queue (CFQ). If the remote\npeer also withholds ACKs, then it can force the local stack\nto allocate ~400MB (depending on ACK delay).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism\nby which a remote peer can notify the local QUIC stack to change the\ndestination connection ID (a.k.a. CID) the local stack uses to\nidentify the connection at the remote peer. Each CID is associated\nwith a sequence number. The sequence number is transmitted\nin NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID\nwhich is being either associated with a connection or retired.\n\nThe remote peer sends a NEW_CONNECTION_ID frame to let the local stack know\na new CID is being associated with an existing connection. The\nNEW_CONNECTION_ID frame carries the new CID, its sequence number, and the\nretire-prior-to number. The retire-prior-to identifies existing\nCIDs that are to be retired. The local QUIC stack must send a\nRETIRE_CONNECTION_ID for every destination CID whose sequence number\nis less than retire-prior-to. The CID becomes retired after the\nlocal stack receives an ACK for its RETIRE_CONNECTION_ID frame.\n\nAlthough the OpenSSL QUIC stack supports at most one destination CID\nfor every connection, it can be tricked into processing more than\none RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC\nstack currently retires the destination CID as soon as it receives\nthe NEW_CONNECTION_ID, while in fact the destination CID must\nbe retired after an ACK for the RETIRE_CONNECTION_ID frame is received.\nCorrecting the flawed logic also fixes the backlog growth.\n\n[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"eb222fe89d397776","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r0:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r0?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"1.3.2-r0","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.3.2-r1"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1.3.2-r1 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"zlib","version":"1.3.2-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.3.2-r1"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-85091","versionConstraint":"< 1.3.2-r1 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"zlib","version":"1.3.2-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-85091","fix":{"state":"fixed","versions":["1.3.2-r1"],"available":[{"date":"2026-10-07","kind":"first-observed","version":"1.3.2-r1"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-08","epss":0.00356,"percentile":0.27225}],"risk":0.28124,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-85091"},"relatedVulnerabilities":[{"id":"CVE-2026-85091","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H","metrics":{"baseScore":7.4,"impactScore":5.2,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-85091","cwe":"CWE-787","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-85091","date":"2026-10-08","epss":0.00356,"percentile":0.27225}],"urls":["https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490","https://github.com/madler/zlib","https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393","https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-85091","description":"zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary."}]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58471","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58471","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58471","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58471","date":"2026-10-08","epss":0.0039,"percentile":0.30936}],"risk":0.26975,"urls":["https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58471","description":"GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58472","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58472","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58472","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58472","date":"2026-10-08","epss":0.0039,"percentile":0.30936}],"risk":0.26975,"urls":["https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58472","description":"GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase."},"relatedVulnerabilities":[]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19662","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19662","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19662","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19662","date":"2026-10-08","epss":0.00464,"percentile":0.38222}],"risk":0.25288000000000005,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19662"},"relatedVulnerabilities":[{"id":"CVE-2026-19662","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19662","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19662","date":"2026-10-08","epss":0.00464,"percentile":0.38222}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://kb.isc.org/docs/cve-2026-19662"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19662","description":"An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, and those answers arrive in a particular order with particular timing, the `named` resolver will encounter a use-after-free bug, and abort.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19662","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19662","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19662","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19662","date":"2026-10-08","epss":0.00464,"percentile":0.38222}],"risk":0.25288000000000005,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19662"},"relatedVulnerabilities":[{"id":"CVE-2026-19662","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19662","cwe":"CWE-416","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19662","date":"2026-10-08","epss":0.00464,"percentile":0.38222}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://kb.isc.org/docs/cve-2026-19662"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19662","description":"An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, and those answers arrive in a particular order with particular timing, the `named` resolver will encounter a use-after-free bug, and abort.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19668","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19668","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19668","cwe":"CWE-407","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19668","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"risk":0.24719999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19668"},"relatedVulnerabilities":[{"id":"CVE-2026-19668","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19668","cwe":"CWE-407","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19668","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19668"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19668","description":"A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record.  Default limits on \"max-records-per-type\" and \"max-types-per-name\" help mitigate the exposure.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75029","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-75029","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75029","cwe":"CWE-405","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-75029","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"risk":0.24719999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-75029"},"relatedVulnerabilities":[{"id":"CVE-2026-75029","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75029","cwe":"CWE-405","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-75029","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-75029"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75029","description":"In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly lead to other memory attack vectors.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19668","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19668","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19668","cwe":"CWE-407","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19668","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"risk":0.24719999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19668"},"relatedVulnerabilities":[{"id":"CVE-2026-19668","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19668","cwe":"CWE-407","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19668","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19668"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19668","description":"A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record.  Default limits on \"max-records-per-type\" and \"max-types-per-name\" help mitigate the exposure.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75029","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-75029","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75029","cwe":"CWE-405","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-75029","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"risk":0.24719999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-75029"},"relatedVulnerabilities":[{"id":"CVE-2026-75029","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75029","cwe":"CWE-405","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-75029","date":"2026-10-08","epss":0.0048,"percentile":0.39416}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-75029"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75029","description":"In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly lead to other memory attack vectors.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75803","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-75803","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75803","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75803","date":"2026-10-08","epss":0.00232,"percentile":0.12871}],"risk":0.20996,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-75803"},"relatedVulnerabilities":[{"id":"CVE-2026-75803","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75803","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75803","date":"2026-10-08","epss":0.00232,"percentile":0.12871}],"urls":["https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42","https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b","https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a","https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34","https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75803","description":"Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module."}]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.5.8-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-75803","versionConstraint":"< 3.5.8-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-75803","fix":{"state":"fixed","versions":["3.5.8-r0"],"available":[{"date":"2026-08-26","kind":"first-observed","version":"3.5.8-r0"}]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75803","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75803","date":"2026-10-08","epss":0.00232,"percentile":0.12871}],"risk":0.20996,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-75803"},"relatedVulnerabilities":[{"id":"CVE-2026-75803","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75803","cwe":"CWE-354","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75803","date":"2026-10-08","epss":0.00232,"percentile":0.12871}],"urls":["https://github.com/openssl/openssl/commit/119ab9555dc62275bbd71f6f49529b1a44feba42","https://github.com/openssl/openssl/commit/3621257986e27e540bf96a11570929a6e5a9e05b","https://github.com/openssl/openssl/commit/6c7aa6f8f6449b7fe0137ee8be65fcd239bd7d6a","https://github.com/openssl/openssl/commit/bdeb0cd994d915342787f117ee75044f0dc36f34","https://github.com/openssl/openssl/commit/bf95f5f772e9362f87b25cfa2f8cb15d984865b9","https://openssl-library.org/news/secadv/20260825.txt"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75803","description":"Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty\nciphertext can report success without verifying the supplied authentication\ntag when the operation is finalized by calling the EVP_Cipher() function.\n\nImpact summary: Applications calling EVP_Cipher() on an empty ciphertext and\nexpecting the call to check the AEAD tag may accept forged messages.\n\nCWE: CWE-354 (Improper Validation of Integrity Check Value)\n\nDescription: The EVP_Cipher() API call for AEAD ciphers behaves like a one\nshot encryption and decryption call. It also verifies the AEAD tag after the\ndecryption operation. However for AES-OCB and ChaCha20-Poly1305 ciphers\nit skipped the AEAD tag verification when an empty ciphertext was passed to\nthe function. The callers of this function might believe that a successful\nreturn indicates a valid AEAD tag for these ciphers, even when that has not\ntruly been validated in this case.\n\nFIPS impact: no\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this CVE\nas the affected algorithms are not FIPS approved and thus not implemented\nin the FIPS module."}]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-08","epss":0.00428,"percentile":0.35056}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-08","epss":0.00428,"percentile":0.35056}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-08","epss":0.00428,"percentile":0.35056}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-08","epss":0.00428,"percentile":0.35056}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-72897","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-72897","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-08","epss":0.00266,"percentile":0.1695}],"risk":0.1995,"urls":["https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-72897","description":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-72897","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-72897","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-72897","cwe":"CWE-787","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-72897","date":"2026-10-08","epss":0.00266,"percentile":0.1695}],"risk":0.1995,"urls":["https://github.com/openssl/openssl/commit/00646e5085a0d12d29e0d2f9b9bc5f7111a50922","https://github.com/openssl/openssl/commit/4135f553c9d3ba4a09fe752f5d30af2a6a092b2e","https://github.com/openssl/openssl/commit/9c54d209486f6b1ad79fe2179c40f13200fa4f61","https://github.com/openssl/openssl/commit/e87ed26b298a74d8ba61a53e9c7bcd1acac6b814","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-72897","description":"Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a\nconnection to a different SSL_CTX part way through a handshake may access\nmemory beyond the end of an internal array if the replacement context knows\nabout more provider signature algorithms than the context the connection was\ncreated from. Applications which never call SSL_set_SSL_CTX() are not\naffected.\n\nImpact summary: A remote peer may be able to cause a small out-of-bounds\nread, and in some circumstances a fixed-value out-of-bounds write, on the\nserver heap. This may lead to a Denial of Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: A TLS connection records how many certificate slots it has\nwhen it is created, taken from the SSL_CTX that created it: the built-in\ncertificate types plus one slot for each provider TLS-SIGALG entry that\ncontext was aware of. That count sizes an internal array of per-slot\ncertificate validity flags.\n\nAn application may replace a connection's SSL_CTX part way through the\nhandshake by calling SSL_set_SSL_CTX(), most commonly from a servername\ncallback in order to serve a different virtual host. Doing so did not\nrefresh the recorded count. A provider signature algorithm's slot index is\nits position in the list of whichever context resolves it, so if the\nreplacement context is aware of more of them than the original, an\nalgorithm offered by the peer can resolve to an index beyond the end of the\narray. Processing the peer's signature algorithms then reads one four byte\nword past the end for each such algorithm and, where the word read is zero,\nwrites a fixed value over it. A peer offering many of them can corrupt heap\nmetadata and abort the process.\n\nOnly provider signature algorithms which occupy one of the excess slots,\nand which the server also has configured, have this effect. Codepoints the\nreplacement context does not recognise are discarded without being resolved\nto a slot, and provider signature algorithms are usable only from TLS 1.3.\n\nThe two contexts must therefore be aware of different numbers of provider\nsignature algorithms, which requires separate library contexts, a provider\nloaded between the two being created, or providers which differ in what\nthey advertise - in 4.0, for example, the default provider advertises SM2\nwhere the FIPS provider does not. A deployment meeting the condition is\nalso unable to negotiate the affected algorithms with legitimate clients,\nsince the same stale count hides the corresponding certificates, so the\nmisconfiguration is likely to be noticed. For that reason, and because the\nconfiguration is not the default, this issue has been assessed as Low\nseverity.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue as the affected code is outside\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75806","versionConstraint":">= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-08","epss":0.00387,"percentile":0.30642}],"risk":0.199305,"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75806","versionConstraint":">= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75806","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75806","cwe":"CWE-1284","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75806","date":"2026-10-08","epss":0.00387,"percentile":0.30642}],"risk":0.199305,"urls":["https://github.com/openssl/openssl/commit/04728a289a823e68137f88da016cb9ede307217d","https://github.com/openssl/openssl/commit/050b275cd671a6eed1d6457642d41a5a77aab972","https://github.com/openssl/openssl/commit/3a4589d015a9049d47b66f186cf50a8711343a1d","https://github.com/openssl/openssl/commit/5af82fefbaf2b5fec2fc0e1d87f112844902f01d","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75806","description":"Issue summary: An established DTLS 1.2 association using an AEAD cipher suite\ncan be terminated by a single unauthenticated datagram whose encrypted\nfragment is shorter than the mandatory explicit IV and authentication tag\noverhead.\n\nImpact summary: An attacker who can send a datagram that is routed to an\nexisting DTLS 1.2 association can tear that association down without knowing\nany key material. This is a Denial of Service limited to the targeted\nassociation. There is no memory safety or confidentiality impact.\n\nCWE: CWE-1284: Improper Validation of Specified Quantity in Input\n\nDescription: In TLS 1.2 and DTLS 1.2 every record protected by an AEAD cipher\nsuite carries an explicit IV followed by the ciphertext and an authentication\ntag. When decrypting such a record the record layer passed the record length to\nthe cipher implementation before checking that the record was long enough to\ncontain the explicit IV and the tag. For a record shorter than that overhead the\ncipher implementation rejected the impossible length, and the record layer\ntreated this as an internal failure and raised a fatal internal_error alert\ninstead of treating the record as one that failed authentication.\n\nIn TLS 1.2 the same record causes a fatal internal_error alert instead of the\nexpected bad_record_mac alert. Since any undecryptable record already\nterminates a TLS connection, this is a protocol conformance issue rather than\na security issue in TLS.\n\nThe fix validates the record length against the explicit IV and tag length\nbefore any AEAD processing, so that TLS reports bad_record_mac and DTLS\nsilently discards the record.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69649","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69649","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69649","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69649","date":"2026-10-08","epss":0.00266,"percentile":0.17224}],"risk":0.1862,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33697","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69649","description":"GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75804","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75804","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-08","epss":0.00352,"percentile":0.26759}],"risk":0.18128,"urls":["https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75804","description":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75804","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75804","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75804","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75804","date":"2026-10-08","epss":0.00352,"percentile":0.26759}],"risk":0.18128,"urls":["https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e","https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538","https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a","https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75804","description":"Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n  - the remote peer opens several streams\n  - each stream must stay within the stream-level flow control limit\n  - there must be no zero-offset byte sent on any of the streams\n    (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"4395698d712dd597","cpes":["cpe:2.3:a:nghttp2-libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2-libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2-libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2-libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2_libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp-libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp_libs:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp2:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp2-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp2_libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp-libs:1.69.0-r0:*:*:*:*:*:*:*","cpe:2.3:a:nghttp:nghttp_libs:1.69.0-r0:*:*:*:*:*:*:*"],"name":"nghttp2-libs","purl":"pkg:apk/alpine/nghttp2-libs@1.69.0-r0?arch=x86_64&distro=alpine-3.24.1&upstream=nghttp2","type":"apk","version":"1.69.0-r0","language":"","licenses":["MIT"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libnghttp2.so.14"},{"path":"/usr/lib/libnghttp2.so.14.29.4"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"nghttp2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.70.0-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-58055","versionConstraint":"< 1.70.0-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"nghttp2","version":"1.69.0-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-58055","fix":{"state":"fixed","versions":["1.70.0-r0"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"1.70.0-r0"}]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58055","cwe":"CWE-444","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58055","date":"2026-10-08","epss":0.00319,"percentile":0.22818}],"risk":0.18023499999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-58055"},"relatedVulnerabilities":[{"id":"CVE-2026-58055","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","metrics":{"baseScore":5.4,"impactScore":2.8,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58055","cwe":"CWE-444","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58055","date":"2026-10-08","epss":0.00319,"percentile":0.22818}],"urls":["https://github.com/bikini/exploitarium/tree/main/nghttp2-nghttpx-upgrade-queue-poison-poc","https://github.com/nghttp2/nghttp2/commit/ab28105c4a0197da24f8bfc414bc116055249e1e","https://www.vulncheck.com/advisories/nghttp2-nghttpx-http-request-response-smuggling-via-upgrade-request-with-content-length"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58055","description":"nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting ambiguous message in the attacker's favor enables HTTP request/response smuggling and cross-client response-queue poisoning."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42772","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42772","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-08","epss":0.0033,"percentile":0.24031}],"risk":0.16995000000000002,"urls":["https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42772","description":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-42772","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-42772","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-42772","cwe":"CWE-407","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-42772","date":"2026-10-08","epss":0.0033,"percentile":0.24031}],"risk":0.16995000000000002,"urls":["https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09","https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e","https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773","https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-42772","description":"Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-08","epss":0.00291,"percentile":0.19874}],"risk":0.16732499999999997,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.1&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-08","epss":0.00291,"percentile":0.19874}],"risk":0.16732499999999997,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.1&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-08","epss":0.00291,"percentile":0.19874}],"risk":0.16732499999999997,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"2c78c176e93c9919","cpes":["cpe:2.3:a:pcre2:pcre2:10.48-r0:*:*:*:*:*:*:*","cpe:2.3:a:pcre2:pcre:10.48-r0:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre2:10.48-r0:*:*:*:*:*:*:*","cpe:2.3:a:pcre:pcre:10.48-r0:*:*:*:*:*:*:*"],"name":"pcre2","purl":"pkg:apk/alpine/pcre2@10.48-r0?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"10.48-r0","language":"","licenses":["BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libpcre2-8.so.0"},{"path":"/usr/lib/libpcre2-8.so.0.16.0"},{"path":"/usr/lib/libpcre2-posix.so.3"},{"path":"/usr/lib/libpcre2-posix.so.3.0.8"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"pcre2"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"10.49-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-103111","versionConstraint":"< 10.49-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"pcre2","version":"10.48-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"10.49-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-103111","versionConstraint":"< 10.49-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"pcre2","version":"10.48-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-103111","fix":{"state":"fixed","versions":["10.49-r0"],"available":[{"date":"2026-10-02","kind":"first-observed","version":"10.49-r0"}]},"cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-08","epss":0.00214,"percentile":0.10812}],"risk":0.16157000000000002,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-103111"},"relatedVulnerabilities":[{"id":"CVE-2026-103111","cvss":[{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","metrics":{"baseScore":7.6,"impactScore":4.8,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-103111","cwe":"CWE-787","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-103111","date":"2026-10-08","epss":0.00214,"percentile":0.10812}],"urls":["https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m","https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-103111","description":"PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data."}]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6846","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6846","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6846","date":"2026-10-08","epss":0.00196,"percentile":0.08543}],"risk":0.14994,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6846","https://bugzilla.redhat.com/show_bug.cgi?id=2460006","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6846.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6846","description":"A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable."},"relatedVulnerabilities":[]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19033","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19033","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19033","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19033","date":"2026-10-08","epss":0.0024,"percentile":0.13929}],"risk":0.13799999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19033"},"relatedVulnerabilities":[{"id":"CVE-2026-19033","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19033","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19033","date":"2026-10-08","epss":0.0024,"percentile":0.13929}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19033"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19033","description":"For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to a secondary server. Although no TSIG signature ever arrives, `named` does not rollback to the pre-transfer state. To exploit the vulnerability, the transfer must be a multi-message TCP IXFR, as described by RFC 8945.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19033","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19033","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19033","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19033","date":"2026-10-08","epss":0.0024,"percentile":0.13929}],"risk":0.13799999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19033"},"relatedVulnerabilities":[{"id":"CVE-2026-19033","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19033","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19033","date":"2026-10-08","epss":0.0024,"percentile":0.13929}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19033"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19033","description":"For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to a secondary server. Although no TSIG signature ever arrives, `named` does not rollback to the pre-transfer state. To exploit the vulnerability, the transfer must be a multi-message TCP IXFR, as described by RFC 8945.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-35189","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-35189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35189","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35189","date":"2026-10-08","epss":0.00267,"percentile":0.17282}],"risk":0.13750500000000002,"urls":["https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84","https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89","https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f","https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35189","description":"Issue summary: A certificate with many nameRelativeToCRLIssuer CRL\ndistribution points causes disproportionate heap growth when OpenSSL caches\nX.509 extensions.\n\nImpact summary: Receiving a crafted certificate from a malicious peer can lead\nto significant memory pressure and possible Denial of Service in clients or\nin servers that solicit client certificates.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: A certificate or a set of certificates that fits under the limit for\nsize of certificates accepted from the peer (~100 KiB) can result in allocation\nof several hundred MiB of resident memory on the receiving side\nduring a normal TLS handshake.  This may be enough to crash the client or\nserver, if multiple concurrent connections lead to similarly large memory\nallocations.\n\nThe fix postpones processing of the CRL distribution points extensions in\ncertificates to the time when the processed value is required for CRL processing.\nThis avoids keeping large memory allocations for a long time when such\ncertificates are received.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-35189","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-35189","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35189","cwe":"CWE-770","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35189","date":"2026-10-08","epss":0.00267,"percentile":0.17282}],"risk":0.13750500000000002,"urls":["https://github.com/openssl/openssl/commit/2b93c73b2c70ddc4c61c5e4bfaaa6bd71379eb84","https://github.com/openssl/openssl/commit/3842516cc15e8b2cf55747011045e77547e71d89","https://github.com/openssl/openssl/commit/8e0efc7549b7ff8246d40e585e3fd604f728473f","https://github.com/openssl/openssl/commit/c72ae182cac17a82e4246c6ecd4e9c4ec3586ec9","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35189","description":"Issue summary: A certificate with many nameRelativeToCRLIssuer CRL\ndistribution points causes disproportionate heap growth when OpenSSL caches\nX.509 extensions.\n\nImpact summary: Receiving a crafted certificate from a malicious peer can lead\nto significant memory pressure and possible Denial of Service in clients or\nin servers that solicit client certificates.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: A certificate or a set of certificates that fits under the limit for\nsize of certificates accepted from the peer (~100 KiB) can result in allocation\nof several hundred MiB of resident memory on the receiving side\nduring a normal TLS handshake.  This may be enough to crash the client or\nserver, if multiple concurrent connections lead to similarly large memory\nallocations.\n\nThe fix postpones processing of the CRL distribution points extensions in\ncertificates to the time when the processed value is required for CRL processing.\nThis avoids keeping large memory allocations for a long time when such\ncertificates are received.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58470","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58470","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58470","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58470","date":"2026-10-08","epss":0.00247,"percentile":0.14668}],"risk":0.13708499999999998,"urls":["https://gitlab.com/gnuwget/wget/-/commit/43d3ba9336bc94937e6fae2365c6ffd30c34ffcf","https://www.vulncheck.com/advisories/gnu-wget-integer-overflow-via-content-range-header-parsing"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58470","description":"GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3441","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3441","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3441","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3441","date":"2026-10-08","epss":0.00191,"percentile":0.0803}],"risk":0.134655,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3441","https://bugzilla.redhat.com/show_bug.cgi?id=2443826"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3442","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3442","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3442","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3442","date":"2026-10-08","epss":0.00191,"percentile":0.0803}],"risk":0.134655,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3442","https://bugzilla.redhat.com/show_bug.cgi?id=2443828"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3442","description":"A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69651","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69651","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69651","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69651","date":"2026-10-08","epss":0.00244,"percentile":0.14363}],"risk":0.1281,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19941","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19941","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19941","cwe":"CWE-345","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19941","date":"2026-10-08","epss":0.00226,"percentile":0.12254}],"risk":0.12317,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19941"},"relatedVulnerabilities":[{"id":"CVE-2026-19941","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19941","cwe":"CWE-345","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19941","date":"2026-10-08","epss":0.00226,"percentile":0.12254}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19941"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19941","description":"An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level of the zone name to mask the existence of a victim's wildcard record.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-19941","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-19941","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19941","cwe":"CWE-345","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19941","date":"2026-10-08","epss":0.00226,"percentile":0.12254}],"risk":0.12317,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-19941"},"relatedVulnerabilities":[{"id":"CVE-2026-19941","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19941","cwe":"CWE-345","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-19941","date":"2026-10-08","epss":0.00226,"percentile":0.12254}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-19941"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19941","description":"An inapplicable NSEC record may be accepted by a `named` resolver as proof that no wildcard exists, which could allow an attacker at the same or an upstream level of the zone name to mask the existence of a victim's wildcard record.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77119","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-77119","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77119","cwe":"CWE-346","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77119","date":"2026-10-08","epss":0.00226,"percentile":0.12253}],"risk":0.12317,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-77119"},"relatedVulnerabilities":[{"id":"CVE-2026-77119","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77119","cwe":"CWE-346","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77119","date":"2026-10-08","epss":0.00226,"percentile":0.12253}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-77119"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77119","description":"A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-77119","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-77119","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77119","cwe":"CWE-346","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77119","date":"2026-10-08","epss":0.00226,"percentile":0.12253}],"risk":0.12317,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-77119"},"relatedVulnerabilities":[{"id":"CVE-2026-77119","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77119","cwe":"CWE-346","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-77119","date":"2026-10-08","epss":0.00226,"percentile":0.12253}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-77119"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77119","description":"A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-35191","versionConstraint":">= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-35191","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35191","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35191","date":"2026-10-08","epss":0.00357,"percentile":0.27407}],"risk":0.11959499999999999,"urls":["https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239","https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5","https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35191","description":"Issue summary: The OpenSSL QUIC server, when configured to not preform address\nvalidation, can be forced to count incoming packets multiple times in its\nunvalidated credit computation, leading to a violation of the RFC 9000\nunvalidated connection amplification limit of 3 times the amount of data\nreceived.\n\nImpact summary: A remote attacker able to spoof packets to a server using the\nOpenSSL QUIC implementation might use the server for an amplification of\na DDoS attack.\n\nCWE: CWE-440: Expected Behavior Violation \n\nDescription: OpenSSL's QUIC stack, when operating as a server, enforces client\naddress validation (RFC 9000, Section 8), to confirm the peer address is not\nused for a traffic amplification attack.  If this feature is disabled on the\nserver, the QUIC stack limits the amount of server data that can be sent to 3\ntimes the amount of data received from the peer address, until such time as the\nTLS handshake is completed.\n\nThe OpenSSL QUIC server, when operating in non-validation mode, adds the\nlength of the whole datagram received to the unvalidated credit limit when\nprocessing each QUIC packet in the datagram. A remote peer may,\nafter establishing a connection with an initial client hello frame, send a\nsubsequent datagram containing multiple QUIC packets, leading the server to\naccount the entire datagram length for each packet in the datagram, resulting\nin the server believing that the peer has sent more data than it actually has,\nthereby violating the 3x amplification limit mandated by the RFC.\n\nFIPS impact: no\nAs the QUIC stack lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-35191","versionConstraint":">= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-35191","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-35191","cwe":"CWE-440","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-35191","date":"2026-10-08","epss":0.00357,"percentile":0.27407}],"risk":0.11959499999999999,"urls":["https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239","https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5","https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-35191","description":"Issue summary: The OpenSSL QUIC server, when configured to not preform address\nvalidation, can be forced to count incoming packets multiple times in its\nunvalidated credit computation, leading to a violation of the RFC 9000\nunvalidated connection amplification limit of 3 times the amount of data\nreceived.\n\nImpact summary: A remote attacker able to spoof packets to a server using the\nOpenSSL QUIC implementation might use the server for an amplification of\na DDoS attack.\n\nCWE: CWE-440: Expected Behavior Violation \n\nDescription: OpenSSL's QUIC stack, when operating as a server, enforces client\naddress validation (RFC 9000, Section 8), to confirm the peer address is not\nused for a traffic amplification attack.  If this feature is disabled on the\nserver, the QUIC stack limits the amount of server data that can be sent to 3\ntimes the amount of data received from the peer address, until such time as the\nTLS handshake is completed.\n\nThe OpenSSL QUIC server, when operating in non-validation mode, adds the\nlength of the whole datagram received to the unvalidated credit limit when\nprocessing each QUIC packet in the datagram. A remote peer may,\nafter establishing a connection with an initial client hello frame, send a\nsubsequent datagram containing multiple QUIC packets, leading the server to\naccount the entire datagram length for each packet in the datagram, resulting\nin the server believing that the peer has sent more data than it actually has,\nthereby violating the 3x amplification limit mandated by the RFC.\n\nFIPS impact: no\nAs the QUIC stack lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75805","versionConstraint":">= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75805","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75805","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75805","date":"2026-10-08","epss":0.00222,"percentile":0.1171}],"risk":0.11433000000000001,"urls":["https://github.com/openssl/openssl/commit/7588db7fef14209c3caa3a101d11a02006b19166","https://github.com/openssl/openssl/commit/7ca0ccb5172a577e9b87267d77bfe21e5481a5e7","https://github.com/openssl/openssl/commit/9eb2a8a9b86136cdb39d6d7d50644dd66941cdc3","https://github.com/openssl/openssl/commit/abf02872a4b71767ecc72293424420f5b009190f","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75805","description":"Issue summary: A CMP client that requests certificate revocation on the basis\nof a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when\nprocessing a crafted revocation response. \n\nImpact summary: The NULL pointer dereference happens on a read which \nleads to a crash and a Denial of Service for the affected client application.\n\nCWE: CWE-476: NULL-pointer dereference\n\nDescription: A CMP client revoking a certificate has to tell the server which\ncertificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the\ncertificate itself or its issuer name and serial number. This is\n'openssl cmp -cmd rr -csr <file>' on the command line, or\nOSSL_CMP_exec_RR_ses() with the certificate supplied via\nOSSL_CMP_CTX_set1_p10CSR() through the API.\n\nA CSR does not contain the issuer name and serial number of the certificate,\nso the client does not send them. A server may optionally name the\ncertificate it revoked in its response, and the client then compares that\nname against what it sent. Having sent neither an issuer name nor a serial\nnumber, it has nothing to compare against, and a server returning a specially\ncrafted name causes the client to read from a NULL pointer and crash.\n\nThe revocation response is checked for valid message protection before\nthe affected code is reached, so an attacker must be a malicious or\ncompromised CMP server, or a man-in-the-middle in possession of the\nsecret used for message protection. Clients that identify the certificate\nto be revoked by a certificate or by issuer and serial number rather\nthan by a PKCS#10 CSR are not affected.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-75805","versionConstraint":">= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-75805","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75805","cwe":"CWE-476","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-75805","date":"2026-10-08","epss":0.00222,"percentile":0.1171}],"risk":0.11433000000000001,"urls":["https://github.com/openssl/openssl/commit/7588db7fef14209c3caa3a101d11a02006b19166","https://github.com/openssl/openssl/commit/7ca0ccb5172a577e9b87267d77bfe21e5481a5e7","https://github.com/openssl/openssl/commit/9eb2a8a9b86136cdb39d6d7d50644dd66941cdc3","https://github.com/openssl/openssl/commit/abf02872a4b71767ecc72293424420f5b009190f","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75805","description":"Issue summary: A CMP client that requests certificate revocation on the basis\nof a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when\nprocessing a crafted revocation response. \n\nImpact summary: The NULL pointer dereference happens on a read which \nleads to a crash and a Denial of Service for the affected client application.\n\nCWE: CWE-476: NULL-pointer dereference\n\nDescription: A CMP client revoking a certificate has to tell the server which\ncertificate to revoke, and may do so by supplying a PKCS#10 CSR instead of the\ncertificate itself or its issuer name and serial number. This is\n'openssl cmp -cmd rr -csr <file>' on the command line, or\nOSSL_CMP_exec_RR_ses() with the certificate supplied via\nOSSL_CMP_CTX_set1_p10CSR() through the API.\n\nA CSR does not contain the issuer name and serial number of the certificate,\nso the client does not send them. A server may optionally name the\ncertificate it revoked in its response, and the client then compares that\nname against what it sent. Having sent neither an issuer name nor a serial\nnumber, it has nothing to compare against, and a server returning a specially\ncrafted name causes the client to read from a NULL pointer and crash.\n\nThe revocation response is checked for valid message protection before\nthe affected code is reached, so an attacker must be a malicious or\ncompromised CMP server, or a man-in-the-middle in possession of the\nsecret used for message protection. Clients that identify the certificate\nto be revoked by a certificate or by issuer and serial number rather\nthan by a PKCS#10 CSR are not affected.\n\nFIPS impact: no\nNo FIPS modules are affected by this issue, as the CMP protocol\nimplementation is outside the OpenSSL FIPS module boundary."},"relatedVulnerabilities":[]},{"artifact":{"id":"f0705393b8ef8b55","cpes":["cpe:2.3:a:bind-libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_libs:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-libs:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_libs:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-libs","purl":"pkg:apk/alpine/bind-libs@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libdns-9.20.27.so"},{"path":"/usr/lib/libisc-9.20.27.so"},{"path":"/usr/lib/libisccc-9.20.27.so"},{"path":"/usr/lib/libisccfg-9.20.27.so"},{"path":"/usr/lib/libns-9.20.27.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-78301","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-78301","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":5.8,"impactScore":4,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78301","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-78301","date":"2026-10-08","epss":0.00207,"percentile":0.09884}],"risk":0.11177999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-78301"},"relatedVulnerabilities":[{"id":"CVE-2026-78301","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":5.8,"impactScore":4,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78301","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-78301","date":"2026-10-08","epss":0.00207,"percentile":0.09884}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-78301"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78301","description":"A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g., via zone transfer), queries for names inside the configured zone then lose authoritative status and return an out-of-zone delegation. On a server that also provides recursion BIND can follow this locally sourced cut and cache attacker-supplied data, affecting names outside the configured zone. This situation persists as long as the malformed zone remains in the zone database.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"c51e7fac8a18d6f8","cpes":["cpe:2.3:a:bind-tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind-tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind_tools:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:bind:bind_tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind-tools:9.20.27-r0:*:*:*:*:*:*:*","cpe:2.3:a:isc:bind_tools:9.20.27-r0:*:*:*:*:*:*:*"],"name":"bind-tools","purl":"pkg:apk/alpine/bind-tools@9.20.27-r0?arch=x86_64&distro=alpine-3.24.1&upstream=bind","type":"apk","version":"9.20.27-r0","language":"","licenses":["MPL-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/arpaname"},{"path":"/usr/bin/delv"},{"path":"/usr/bin/dig"},{"path":"/usr/bin/dnstap-read"},{"path":"/usr/bin/host"},{"path":"/usr/bin/mdig"},{"path":"/usr/bin/named-checkzone"},{"path":"/usr/bin/named-compilezone"},{"path":"/usr/bin/named-journalprint"},{"path":"/usr/bin/named-rrchecker"},{"path":"/usr/bin/nslookup"},{"path":"/usr/bin/nsupdate"},{"path":"/usr/sbin"},{"path":"/usr/sbin/ddns-confgen"},{"path":"/usr/sbin/rndc-confgen"},{"path":"/usr/sbin/tsig-keygen"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"bind"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"9.20.29-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-78301","versionConstraint":"< 9.20.29-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.1"},"package":{"name":"bind","version":"9.20.27-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-78301","fix":{"state":"fixed","versions":["9.20.29-r0"],"available":[{"date":"2026-09-27","kind":"first-observed","version":"9.20.29-r0"}]},"cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":5.8,"impactScore":4,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78301","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-78301","date":"2026-10-08","epss":0.00207,"percentile":0.09884}],"risk":0.11177999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-78301"},"relatedVulnerabilities":[{"id":"CVE-2026-78301","cvss":[{"type":"Secondary","source":"security-officer@isc.org","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":5.8,"impactScore":4,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-78301","cwe":"CWE-349","type":"Secondary","source":"security-officer@isc.org"}],"epss":[{"cve":"CVE-2026-78301","date":"2026-10-08","epss":0.00207,"percentile":0.09884}],"urls":["https://downloads.isc.org/isc/bind9/9.20.29","https://downloads.isc.org/isc/bind9/9.21.26","https://kb.isc.org/docs/cve-2026-78301"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-78301","description":"A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g., via zone transfer), queries for names inside the configured zone then lose authoritative status and return an out-of-zone delegation. On a server that also provides recursion BIND can follow this locally sourced cut and cache attacker-supplied data, affecting names outside the configured zone. This situation persists as long as the malformed zone remains in the zone database.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."}]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69652","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69652","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69652","cwe":"CWE-460","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69652","date":"2026-10-08","epss":0.00179,"percentile":0.06865}],"risk":0.10024000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33701","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69648","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69648","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69648","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69648","date":"2026-10-08","epss":0.00179,"percentile":0.06845}],"risk":0.10024000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33641","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54875","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54875","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54875","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54875","date":"2026-10-08","epss":0.00294,"percentile":0.20137}],"risk":0.09849,"urls":["https://github.com/openssl/openssl/commit/3f01bbc28f7e08211fcdc797fd43816504f94257","https://github.com/openssl/openssl/commit/469f3e42629f4a0b5631796e20c66c92c138a3e8","https://github.com/openssl/openssl/commit/9794ed473764839275cb701b4850f3c24d929c28","https://github.com/openssl/openssl/commit/dddad955d5ff3e9507619cf4e0f13e9988e2197c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54875","description":"Issue summary: A non-constant-time optimized implementation of scalar\npoint multiplication is used for SM2 private key operations on ARM64 and\nRISC-V platforms.\n\nImpact summary: An attacker able to measure the time taken by, or to observe\nthe cache-line access pattern of SM2 signing or decryption on an affected\nplatform can learn information about the secret scalar.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: On ARM64 and RISC-V processors, the SM2 curve uses an optimized\nscalar multiplication implementation whose conditional branches and table\nlook ups are chosen according to the bits of the secret scalar. The execution\ntime and the cache-access pattern therefore depend on the long-term private\nkey (during SM2 decryption) or the per-signature nonce (during SM2 signature\ngeneration), forming a timing and cache side-channel.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm and the optimized SM2 implementation is not part\nof the FIPS module.\n\nOpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and\nRISC-V.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.3.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.5.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.9.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.8.\n\nThis issue was reported on 2 May 2026 by Abhinav Agarwal.\nIt was independently reported on 6 June 2026 by Feng Xue.\nThe fix was developed by Igor Ustinov.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Abhinav Agarwal, Feng Xue\nFixed by: Igor Ustinov"},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54875","versionConstraint":">= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54875","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54875","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54875","date":"2026-10-08","epss":0.00294,"percentile":0.20137}],"risk":0.09849,"urls":["https://github.com/openssl/openssl/commit/3f01bbc28f7e08211fcdc797fd43816504f94257","https://github.com/openssl/openssl/commit/469f3e42629f4a0b5631796e20c66c92c138a3e8","https://github.com/openssl/openssl/commit/9794ed473764839275cb701b4850f3c24d929c28","https://github.com/openssl/openssl/commit/dddad955d5ff3e9507619cf4e0f13e9988e2197c","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54875","description":"Issue summary: A non-constant-time optimized implementation of scalar\npoint multiplication is used for SM2 private key operations on ARM64 and\nRISC-V platforms.\n\nImpact summary: An attacker able to measure the time taken by, or to observe\nthe cache-line access pattern of SM2 signing or decryption on an affected\nplatform can learn information about the secret scalar.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: On ARM64 and RISC-V processors, the SM2 curve uses an optimized\nscalar multiplication implementation whose conditional branches and table\nlook ups are chosen according to the bits of the secret scalar. The execution\ntime and the cache-access pattern therefore depend on the long-term private\nkey (during SM2 decryption) or the per-signature nonce (during SM2 signature\ngeneration), forming a timing and cache side-channel.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm and the optimized SM2 implementation is not part\nof the FIPS module.\n\nOpenSSL 4.0, 3.6, 3.5 and 3.4 are vulnerable to this issue on AArch64 and\nRISC-V.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.\n\nOpenSSL 4.0 users should upgrade to OpenSSL 4.0.3.\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.5.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.9.\nOpenSSL 3.4 users should upgrade to OpenSSL 3.4.8.\n\nThis issue was reported on 2 May 2026 by Abhinav Agarwal.\nIt was independently reported on 6 June 2026 by Feng Xue.\nThe fix was developed by Igor Ustinov.\n\n-- cut (non-publishing metadata for internal use) --\nReported by: Abhinav Agarwal, Feng Xue\nFixed by: Igor Ustinov"},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4647","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4647","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4647","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4647","date":"2026-10-08","epss":0.00168,"percentile":0.05557}],"risk":0.09323999999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-4647","https://bugzilla.redhat.com/show_bug.cgi?id=2450302","https://sourceware.org/bugzilla/show_bug.cgi?id=33919"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4647","description":"A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-08","epss":0.00171,"percentile":0.05865}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-08","epss":0.00171,"percentile":0.05865}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-08","epss":0.00171,"percentile":0.05865}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-08","epss":0.00171,"percentile":0.05865}],"risk":0.0884925,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69647","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69647","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69647","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69647","date":"2026-10-08","epss":0.00158,"percentile":0.04334}],"risk":0.08848000000000002,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33640","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis."},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54872","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54872","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54872","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54872","date":"2026-10-08","epss":0.00263,"percentile":0.16589}],"risk":0.08810499999999999,"urls":["https://github.com/openssl/openssl/commit/1a5bee8dc57430a2be69cd1ffe7fec6a62f4f179","https://github.com/openssl/openssl/commit/3f7e1363dccec6f7732bb9e9fa471bb6e4aa68cb","https://github.com/openssl/openssl/commit/7d83bc7764999dfd91b83b4f0815b45390422afd","https://github.com/openssl/openssl/commit/8166827a78aad164a07aa86dea2b425403ced471","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54872","description":"Issue summary: The generic elliptic-curve scalar multiplication used for\nECDSA and SM2 signature operations with curves that do not have a dedicated\nimplementation leaks information about the secret nonce through timing.\n\nImpact summary: An attacker able to measure signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: The generic elliptic-curve scalar multiplication used for\ncurves that do not have a dedicated constant-time implementation pads the\nsecret scalar with non-constant-time BIGNUM operations, so the time taken\ndepends on the value of the secret scalar derived from the ECDSA and SM2 nonce.\n\nThe leak is very small; observing it requires a large number of\nmeasurements. The effect is largest for curves whose group order lies\non a machine-word boundary, such as brainpoolP384r1.\n\nApplications using ECDSA signing over the Brainpool and other generic prime\ncurves, and SM2 signing on platforms that use the generic implementation,\nare vulnerable to this issue.\n\nThe NIST curves P-256, P-384 and P-521 use dedicated constant-time\nimplementations and are not affected.\n\nFIPS Impact: no\nThe FIPS modules are not affected: the approved NIST curves used in the FIPS\nprovider have dedicated constant-time implementations and do not use the\naffected code path."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-54872","versionConstraint":">= 1.0.2, < 1.0.2zs||>= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-54872","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54872","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-54872","date":"2026-10-08","epss":0.00263,"percentile":0.16589}],"risk":0.08810499999999999,"urls":["https://github.com/openssl/openssl/commit/1a5bee8dc57430a2be69cd1ffe7fec6a62f4f179","https://github.com/openssl/openssl/commit/3f7e1363dccec6f7732bb9e9fa471bb6e4aa68cb","https://github.com/openssl/openssl/commit/7d83bc7764999dfd91b83b4f0815b45390422afd","https://github.com/openssl/openssl/commit/8166827a78aad164a07aa86dea2b425403ced471","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54872","description":"Issue summary: The generic elliptic-curve scalar multiplication used for\nECDSA and SM2 signature operations with curves that do not have a dedicated\nimplementation leaks information about the secret nonce through timing.\n\nImpact summary: An attacker able to measure signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: The generic elliptic-curve scalar multiplication used for\ncurves that do not have a dedicated constant-time implementation pads the\nsecret scalar with non-constant-time BIGNUM operations, so the time taken\ndepends on the value of the secret scalar derived from the ECDSA and SM2 nonce.\n\nThe leak is very small; observing it requires a large number of\nmeasurements. The effect is largest for curves whose group order lies\non a machine-word boundary, such as brainpoolP384r1.\n\nApplications using ECDSA signing over the Brainpool and other generic prime\ncurves, and SM2 signing on platforms that use the generic implementation,\nare vulnerable to this issue.\n\nThe NIST curves P-256, P-384 and P-521 use dedicated constant-time\nimplementations and are not affected.\n\nFIPS Impact: no\nThe FIPS modules are not affected: the approved NIST curves used in the FIPS\nprovider have dedicated constant-time implementations and do not use the\naffected code path."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-08","epss":0.00186,"percentile":0.07525}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-08","epss":0.00186,"percentile":0.07525}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-08","epss":0.00186,"percentile":0.07525}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.1&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-08","epss":0.00186,"percentile":0.07525}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"e23c248c64dfa980","cpes":["cpe:2.3:a:libcrypto3:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto3:libcrypto:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libcrypto:libcrypto:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libcrypto3","purl":"pkg:apk/alpine/libcrypto3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/ssl"},{"path":"/etc/ssl/ct_log_list.cnf"},{"path":"/etc/ssl/ct_log_list.cnf.dist"},{"path":"/etc/ssl/openssl.cnf"},{"path":"/etc/ssl/openssl.cnf.dist"},{"path":"/etc/ssl/certs"},{"path":"/etc/ssl/private"},{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libcrypto.so.3"},{"path":"/usr/lib/engines-3"},{"path":"/usr/lib/engines-3/afalg.so"},{"path":"/usr/lib/engines-3/capi.so"},{"path":"/usr/lib/engines-3/loader_attic.so"},{"path":"/usr/lib/engines-3/padlock.so"},{"path":"/usr/lib/ossl-modules"},{"path":"/usr/lib/ossl-modules/legacy.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-77696","versionConstraint":">= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-77696","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77696","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-77696","date":"2026-10-08","epss":0.00243,"percentile":0.14252}],"risk":0.08140499999999999,"urls":["https://github.com/openssl/openssl/commit/1c4aed808a7aea32d2d013049c2e0d9fef164fc9","https://github.com/openssl/openssl/commit/20b20628d39b2dcc4677194bd68c7c060fa598cb","https://github.com/openssl/openssl/commit/419f5cb519721dceed393dbc524d79e487c72e64","https://github.com/openssl/openssl/commit/6b90445a56b99a328ac1feba058abf976504f440","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77696","description":"Issue summary: SM2 signature generation uses non-constant-time arithmetic\non secret values, forming a timing side-channel.\n\nImpact summary: An attacker able to measure SM2 signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: SM2 signature generation computes the signature value using\nvariable-time BIGNUM operations on the secret nonce and the private key, so\nthe time taken to produce an SM2 signature depends on these secret values,\nforming a timing side-channel.\n\nApplications performing SM2 signature generation are affected on all\nplatforms.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm."},"relatedVulnerabilities":[]},{"artifact":{"id":"7de879f497a38539","cpes":["cpe:2.3:a:libssl3:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl3:libssl:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl3:3.5.7-r0:*:*:*:*:*:*:*","cpe:2.3:a:libssl:libssl:3.5.7-r0:*:*:*:*:*:*:*"],"name":"libssl3","purl":"pkg:apk/alpine/libssl3@3.5.7-r0?arch=x86_64&distro=alpine-3.24.1&upstream=openssl","type":"apk","version":"3.5.7-r0","language":"","licenses":["Apache-2.0"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libssl.so.3"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openssl"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-77696","versionConstraint":">= 1.1.1, < 1.1.1zj||>= 3.0.0, < 3.0.23||>= 3.4.0, < 3.4.8||>= 3.5.0, < 3.5.9||>= 3.6.0, < 3.6.5||>= 4.0.0, < 4.0.3 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:openssl:openssl:3.5.7:*:*:*:*:*:*:*"],"package":{"name":"openssl","version":"3.5.7-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-77696","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77696","cwe":"CWE-208","type":"Secondary","source":"openssl-security@openssl.org"}],"epss":[{"cve":"CVE-2026-77696","date":"2026-10-08","epss":0.00243,"percentile":0.14252}],"risk":0.08140499999999999,"urls":["https://github.com/openssl/openssl/commit/1c4aed808a7aea32d2d013049c2e0d9fef164fc9","https://github.com/openssl/openssl/commit/20b20628d39b2dcc4677194bd68c7c060fa598cb","https://github.com/openssl/openssl/commit/419f5cb519721dceed393dbc524d79e487c72e64","https://github.com/openssl/openssl/commit/6b90445a56b99a328ac1feba058abf976504f440","https://openssl-library.org/news/secadv/20260929.txt"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77696","description":"Issue summary: SM2 signature generation uses non-constant-time arithmetic\non secret values, forming a timing side-channel.\n\nImpact summary: An attacker able to measure SM2 signing times may learn\ninformation about the per-signature secret nonce, which over many signatures\ncan, via a lattice / Hidden Number Problem attack, lead to recovery of the\nprivate key.\n\nCWE: CWE-208: Observable Timing Discrepancy\n\nDescription: SM2 signature generation computes the signature value using\nvariable-time BIGNUM operations on the secret nonce and the private key, so\nthe time taken to produce an SM2 signature depends on these secret values,\nforming a timing side-channel.\n\nApplications performing SM2 signature generation are affected on all\nplatforms.\n\nFIPS Impact: no\nSM2 is not a FIPS algorithm."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6844","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6844","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6844","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6844","date":"2026-10-08","epss":0.00147,"percentile":0.03417}],"risk":0.077175,"urls":["https://access.redhat.com/security/cve/CVE-2026-6844","https://bugzilla.redhat.com/show_bug.cgi?id=2460016"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6844","description":"A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6845","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6845","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6845","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6845","date":"2026-10-08","epss":0.00145,"percentile":0.03242}],"risk":0.0725,"urls":["https://access.redhat.com/errata/RHSA-2026:34924","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6845","https://bugzilla.redhat.com/show_bug.cgi?id=2460012"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6845","description":"A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.1","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:2f4e45a354b9fd2144a599f4e50f4a0df272ddd36c41afa3a11f16e6f7524a5c","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69644","versionConstraint":"< 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69644","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69644","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69644","date":"2026-10-08","epss":0.00128,"percentile":0.02137}],"risk":0.064,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33639","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69644","description":"An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file."},"relatedVulnerabilities":[]}],"grade":"F","score":"0.00","as_of":"2026-10-09T19:23:09.411Z","grype_db_version":"2026-10-09T06:32:32.000Z"}