https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:11:24.549619+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00820 bdu:2016-00820 2026-10-05T14:11:24.553649+00:00 bdu:2016-00820 https://cve.radiocsirt.org/vuln/cnvd-2016-01709 cnvd-2016-01709 2026-10-05T14:11:24.553681+00:00 cnvd-2016-01709 https://cve.radiocsirt.org/vuln/euvd-2026-83229 EUVD-2026-83229 2026-10-05T14:11:24.553703+00:00 EUVD-2026-83229 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2856 fkie_cve-2016-2856 2026-10-05T14:11:24.553716+00:00

pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk. NOTE: this is not considered a vulnerability in the upstream GNU C Library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option.

 https://cve.radiocsirt.org/vuln/ghsa-2wf2-64hh-9h2m GHSA-2wf2-64hh-9h2m 2026-10-05T14:11:24.553746+00:00

pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk. NOTE: this is not considered a vulnerability in the upstream GNU C Library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option.

 https://cve.radiocsirt.org/vuln/gsd-2016-2856 gsd-2016-2856 2026-10-05T14:11:24.553766+00:00 gsd-2016-2856 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2856 UBUNTU-CVE-2016-2856 2026-10-05T14:11:24.553776+00:00

Affected: Ubuntu:14.04:LTS: eglibc

pt_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and before 2.19-0ubuntu6.8 on Ubuntu 14.04 LTS; and the glibc package before 2.21-0ubuntu4.2 on Ubuntu 15.10 and before 2.23-0ubuntu1 on Ubuntu 16.04 LTS and 16.10 lacks a namespace check associated with file-descriptor passing, which allows local users to capture keystrokes and spoof data, and possibly gain privileges, via pts read and write operations, related to debian/sysdeps/linux.mk. NOTE: this is not considered a vulnerability in the upstream GNU C Library because the upstream documentation has a clear security recommendation against the --enable-pt_chown option.