https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:50:03.667853+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2026-5358 fkie_cve-2026-5358 2026-10-02T19:50:03.752008+00:00

Rejected reason: REJECTED: CVE-2026-5358 is rejected for two reasons. Firstly it has been discovered that no NIS+ client or server was ever released for any Linux-based OS distributions and as such this makes the API provisional and unused. Secondly it has been discovered that the NIS+ cold start cache (/var/nis/NIS_COLD_START) cannot be bypassed and as such the API can only be called with a trusted server from the pre-populated cache. The use of a trusted server means no trust boundary is crossed and this is therefore considered a normal bug.

 https://cve.radiocsirt.org/vuln/ghsa-jj2g-xq7w-gf88 GHSA-jj2g-xq7w-gf88 2026-10-02T19:50:03.752061+00:00

The obsolete nis_local_principal function in the GNU C Library version 2.43 and older may overflow a buffer in the data section, which could allow an attacker to spoof a crafted response to a UDP request generated by this function and overwrite neighboring static data in the requesting application.

NIS support is obsolete and has been deprecated in the GNU C Library since version 2.26 and is only maintained for legacy usage. Applications should port away from NIS to more modern identity and access management services.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-5358 msrc_CVE-2026-5358 — Static buffer overflow in deprecated nis_local_principal 2026-10-02T19:50:03.752084+00:00 msrc_CVE-2026-5358 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-5358 Withdrawn: UBUNTU-CVE-2026-5358 2026-10-02T19:50:03.752103+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:25.10: glibc, Ubuntu:26.04: glibc

(The obsolete nis_local_principal function in the GNU C Library version ...)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1190 WID-SEC-W-2026-1190 — GNU libc: Mehrere Schwachstellen 2026-10-02T19:50:03.752135+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.