IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.3Yüksek

CVE-2026-5435Potential buffer overflow in ns_sprintrrf TSIG handling path

The GNU C Library glibc; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP; Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP; Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Yayım: (6 ay önce)

Açıklama

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

Zayıflık türü (CWE): CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
gnu glibc 2.2 –
The GNU C Library glibc 2.2
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 – < V3.1.6
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5 – < V3.1.6
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 – < V3.1.6

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (1)
  • cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* ≥ 2.2

Aynı üründe son açıklar — GNU C Library (glibc)

3.7Düşük
CVE-2026-100290

Double free after allocation failure in regcomp and regexec

The GNU C Library glibc

The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The re_dfa_add_node (the NFA node ta…

4.8Orta
CVE-2026-115819

One-byte buffer overflow in wide scanf %s and %[ conversions

The GNU C Library glibc

Calling the wide scanf family of functions (swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf) with a %s or %[ conversion without the 'l' length modifier in the GNU C Library version 2.2 to version 2.44 writes an extra null byte one past the end of the…

5.9Orta
CVE-2026-122054

BIG-HKSCS decoding hang on crafted input

The GNU C Library glibc

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang.

3.7Düşük
CVE-2026-97399

One-byte overread in strncasecmp on Power8

The GNU C Library glibc

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to th…

3.6Düşük
CVE-2026-95818

AT_SECURE program buffer overflow via $ORIGIN processing

The GNU C Library glibc

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH beg…