https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:10:21.608049+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:42694 ALSA-2026:42694 — Moderate: glibc security update 2026-10-02T10:10:22.365114+00:00

Affected: AlmaLinux:10: glibc, AlmaLinux:10: glibc-all-langpacks, AlmaLinux:10: glibc-benchtests, AlmaLinux:10: glibc-common, AlmaLinux:10: glibc-devel, AlmaLinux:10: glibc-doc, AlmaLinux:10: glibc-gconv-extra, AlmaLinux:10: glibc-langpack-aa, AlmaLinux:10: glibc-langpack-af, AlmaLinux:10: glibc-langpack-agr and 211 more

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928) * glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435) * glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2026-10480 bdu:2026-10480 2026-10-02T10:10:22.365420+00:00 bdu:2026-10480 https://cve.radiocsirt.org/vuln/bell-cve-2026-6238 BELL-CVE-2026-6238 2026-10-02T10:10:22.365444+00:00

Affected: Alpaquita:23: glibc, Alpaquita:25: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc, BellSoft Hardened Containers:25: glibc, BellSoft Hardened Containers:stream: glibc

 https://cve.radiocsirt.org/vuln/brew-glibc-cve-2026-6238 BREW-glibc-CVE-2026-6238 2026-10-02T10:10:22.365473+00:00

Affected: Homebrew: glibc

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1094 certfr-2026-avi-1094 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T10:10:22.365491+00:00 certfr-2026-avi-1094 https://cve.radiocsirt.org/vuln/euvd-2026-336372 EUVD-2026-336372 2026-10-02T10:10:22.365508+00:00 EUVD-2026-336372 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6238 fkie_cve-2026-6238 2026-10-02T10:10:22.365519+00:00

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory.

These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.

 https://cve.radiocsirt.org/vuln/ghsa-h8wx-jcwq-g3cp GHSA-h8wx-jcwq-g3cp 2026-10-02T10:10:22.365545+00:00

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to validate the RDATA content against the RDATA length in a DNS response when processing LOC, CERT, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory.

These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6238 msrc_CVE-2026-6238 — Buffer overread in ns_printrrf with corrupted RDATA field 2026-10-02T10:10:22.365563+00:00 msrc_CVE-2026-6238 https://cve.radiocsirt.org/vuln/oesa-2026-2592 OESA-2026-2592 — glibc security update 2026-10-02T10:10:22.365580+00:00

Affected: openEuler:22.03-LTS-SP4: glibc

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es):

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.(CVE-2026-5435)

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to validate the RDATA content against the RDATA length in a DNS response when processing LOC, CERT, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory.

These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.(CVE-2026-6238)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11140-1 openSUSE-SU-2026:11140-1 — glibc-2.43-4.1 on GA media 2026-10-02T10:10:22.365611+00:00

glibc-2.43-4.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:12740 RHSA-2026:12740 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T10:10:22.365630+00:00

glibc: glibc: Denial of Service via iconv() function with specific character sets glibc: glibc: Out-of-bounds write via TSIG record processing glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

 https://cve.radiocsirt.org/vuln/rlsa-2026:42694 RLSA-2026:42694 — Moderate: glibc security update 2026-10-02T10:10:22.365663+00:00

Affected: Rocky Linux:10: glibc

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

* glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings (CVE-2026-5928)

* glibc: glibc: Out-of-bounds write via TSIG record processing (CVE-2026-5435)

* glibc: glibc: Application crash or uninitialized memory read via crafted DNS response (CVE-2026-6238)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ssa-082556 SSA-082556 — SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 2026-10-02T10:10:22.365691+00:00

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

 https://cve.radiocsirt.org/vuln/suse-su-2026:22453-1 SUSE-SU-2026:22453-1 — Security update for glibc 2026-10-02T10:10:22.365861+00:00

Security update for glibc

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6238 UBUNTU-CVE-2026-6238 2026-10-02T10:10:22.365877+00:00

Affected: Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:25.10: glibc, Ubuntu:26.04:LTS: glibc

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response, causing a target application to crash or read uninitialized memory. These functions are for application debugging only and hence not in the path of code executed by the DNS resolver. Further, they have been deprecated since version 2.34 and should not be used by any new applications. Applications should consider porting away from these interfaces since they may be removed in future versions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1300 WID-SEC-W-2026-1300 — GNU libc: Mehrere Schwachstellen 2026-10-02T10:10:22.365912+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GNU libc ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.