https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:52:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04909 bdu:2025-04909 https://cve.radiocsirt.org/vuln/bdu:2025-04909 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0113 certfr-2025-avi-0113 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0113 https://cve.radiocsirt.org/vuln/euvd-2026-261447 EUVD-2026-261447 https://cve.radiocsirt.org/vuln/euvd-2026-261447 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47069 <p>p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.</p> <p>p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-47069 https://cve.radiocsirt.org/vuln/ghsa-hjgv-c5xv-9h9v <p>p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.</p> <p>p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.</p> https://cve.radiocsirt.org/vuln/ghsa-hjgv-c5xv-9h9v https://cve.radiocsirt.org/vuln/gsd-2022-47069 gsd-2022-47069 https://cve.radiocsirt.org/vuln/gsd-2022-47069 https://cve.radiocsirt.org/vuln/icsa-25-044-09 <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> <p>Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured. A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a se…</p> https://cve.radiocsirt.org/vuln/icsa-25-044-09 https://cve.radiocsirt.org/vuln/msrc_cve-2022-47069 msrc_CVE-2022-47069 https://cve.radiocsirt.org/vuln/msrc_cve-2022-47069 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47069 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: p7zip, Ubuntu:16.04:LTS: p7zip, Ubuntu:18.04:LTS: p7zip, Ubuntu:20.04:LTS: p7zip, Ubuntu:22.04:LTS: p7zip, Ubuntu:24.04:LTS: p7zip, Ubuntu:25.10: p7zip</p> <p>p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: p7zip, Ubuntu:16.04:LTS: p7zip, Ubuntu:18.04:LTS: p7zip, Ubuntu:20.04:LTS: p7zip, Ubuntu:22.04:LTS: p7zip, Ubuntu:24.04:LTS: p7zip, Ubuntu:25.10: p7zip</p> <p>p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47069