https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:06:48 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:1696 <p><strong>Affected:</strong> AlmaLinux:10: libblkid, AlmaLinux:10: libblkid-devel, AlmaLinux:10: libfdisk, AlmaLinux:10: libfdisk-devel, AlmaLinux:10: libmount, AlmaLinux:10: libmount-devel, AlmaLinux:10: libsmartcols, AlmaLinux:10: libsmartcols-devel, AlmaLinux:10: libuuid, AlmaLinux:10: libuuid-devel and 4 more</p> <p>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.</p> <p>Security Fix(es):</p> <p>* util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: libblkid, AlmaLinux:10: libblkid-devel, AlmaLinux:10: libfdisk, AlmaLinux:10: libfdisk-devel, AlmaLinux:10: libmount, AlmaLinux:10: libmount-devel, AlmaLinux:10: libsmartcols, AlmaLinux:10: libsmartcols-devel, AlmaLinux:10: libuuid, AlmaLinux:10: libuuid-devel and 4 more</p> <p>The util-linux packages contain a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, these include the fdisk configuration tool and the login program.</p> <p>Security Fix(es):</p> <p>* util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames (CVE-2025-14104)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:1696 https://cve.radiocsirt.org/vuln/bdu:2026-02747 bdu:2026-02747 https://cve.radiocsirt.org/vuln/bdu:2026-02747 https://cve.radiocsirt.org/vuln/bell-cve-2025-14104 <p><strong>Affected:</strong> Alpaquita:23: util-linux, Alpaquita:25: util-linux, Alpaquita:stream: util-linux, BellSoft Hardened Containers:23: util-linux, BellSoft Hardened Containers:25: util-linux, BellSoft Hardened Containers:stream: util-linux</p> <p><strong>Affected:</strong> Alpaquita:23: util-linux, Alpaquita:25: util-linux, Alpaquita:stream: util-linux, BellSoft Hardened Containers:23: util-linux, BellSoft Hardened Containers:25: util-linux, BellSoft Hardened Containers:stream: util-linux</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-14104 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0199 https://cve.radiocsirt.org/vuln/euvd-2026-362226 EUVD-2026-362226 https://cve.radiocsirt.org/vuln/euvd-2026-362226 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14104 <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.</p> <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14104 https://cve.radiocsirt.org/vuln/ghsa-hrx4-rccm-xj6c <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.</p> <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.</p> https://cve.radiocsirt.org/vuln/ghsa-hrx4-rccm-xj6c https://cve.radiocsirt.org/vuln/msrc_cve-2025-14104 msrc_CVE-2025-14104 https://cve.radiocsirt.org/vuln/msrc_cve-2025-14104 https://cve.radiocsirt.org/vuln/oesa-2026-1184 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: util-linux</p> <p>The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):</p> <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.(CVE-2025-14104)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: util-linux</p> <p>The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fix(es):</p> <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.(CVE-2025-14104)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1184 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10072-1 <p>libblkid-devel-2.41.3-1.1 on GA media</p> <p>libblkid-devel-2.41.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10072-1 https://cve.radiocsirt.org/vuln/rhsa-2026:2485 <p>curl: libcurl: Curl out of bounds read for cookie path openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file glib: Integer overflow in in g_escape_uri_string() util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing openssl: OpenSSL: Denial of Service via malformed TimeStamp Response openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification</p> <p>curl: libcurl: Curl out of bounds read for cookie path openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file glib: Integer overflow in in g_escape_uri_string() util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing openssl: OpenSSL: Denial of Service via malformed TimeStamp Response openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification</p> https://cve.radiocsirt.org/vuln/rhsa-2026:2485 https://cve.radiocsirt.org/vuln/suse-su-2026:0115-1 <p>Security update for util-linux</p> <p>Security update for util-linux</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0115-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14104 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux</p> <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: util-linux, Ubuntu:Pro:16.04:LTS: util-linux, Ubuntu:18.04:LTS: util-linux, Ubuntu:Pro:20.04:LTS: util-linux</p> <p>A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14104 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2755 <p>Ein lokaler Angreifer kann eine Schwachstelle in util-linux ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in util-linux ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2755