Giriş API Anahtarı Al

5.5Orta

CVE-2026-125703Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8 Yayım: 2026-11-10 13:43 (dün)

Açıklama

A flaw was found in the GStreamer gst-plugins-bad MXF plugin. Insufficient bounds checks when parsing crafted VANC data can cause an out-of-bounds read in the demuxer, while an incorrect buffer size calculation when muxing multiple ancillary packets can cause an out-of-bounds write. Processing affected content may crash the application, resulting in a denial of service.

Zayıflık türü (CWE): CWE-20

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 6	all versions
Red Hat	Red Hat Enterprise Linux 7	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions

Kaynaklar ve yamalar

CVSS puanı

5.5Orta

Kaynak: redhat · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekir
Kapsam: Değişmez
Gizlilik: Yok
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tüm puanlar (2)

cna	CVSS 3.1	5.5Orta
secalert@redhat.com	CVSS 3.1	5.5Orta

Zaman çizelgesi

Numara ayrıldı2026-11-10
Yayımlandı2026-11-10 13:43
IP-DB'ye ulaştı2026-11-10 14:03
Son güncelleme2026-11-11 02:17

Numarayı veren (CNA): redhat
NVD durumu: Awaiting Analysis

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Red Hat Enterprise Linux

6.3Orta

CVE-2026-124745 2 saat önce

Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links t…

6.3Orta

CVE-2026-124744 2 saat önce

Busybox: cpio hardlink target not sanitized under feature_path_traversal_protection

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting files using the cpio utility with path traversal protection enabled, hardlink target paths are not properly sanitized. By tricking a user or automated process into extracting a crafted archive, an attacker can crea…

7.6Yüksek

CVE-2026-124741 4 saat önce

Busybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, tr…

7.5Yüksek

CVE-2026-124739 4 saat önce

Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could explo…

7.5Yüksek

CVE-2026-124737 5 saat önce

Busybox: heap buffer overflow in the tftp client on fallback to the default block size

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP serv…

6.5Orta

CVE-2026-121885 dün

Podman: untrusted image labels allow auto-update to restart arbitrary systemd units

podman; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart.…