https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:54:28 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-6791 <p><strong>Affected:</strong> Alpaquita:23: glibc, Alpaquita:25: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc, BellSoft Hardened Containers:25: glibc, BellSoft Hardened Containers:stream: glibc</p> <p><strong>Affected:</strong> Alpaquita:23: glibc, Alpaquita:25: glibc, Alpaquita:stream: glibc, BellSoft Hardened Containers:23: glibc, BellSoft Hardened Containers:25: glibc, BellSoft Hardened Containers:stream: glibc</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-6791 https://cve.radiocsirt.org/vuln/euvd-2026-351629 EUVD-2026-351629 https://cve.radiocsirt.org/vuln/euvd-2026-351629 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6791 <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&#39;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.</p> <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&#39;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6791 https://cve.radiocsirt.org/vuln/ghsa-ch73-g8qv-r6r5 <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&#39;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.</p> <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&#39;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.</p> https://cve.radiocsirt.org/vuln/ghsa-ch73-g8qv-r6r5 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6791 msrc_CVE-2026-6791 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6791 https://cve.radiocsirt.org/vuln/oesa-2026-3418 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: glibc, openEuler:22.03-LTS-SP4: glibc, openEuler:24.03-LTS-SP1: glibc, openEuler:24.03-LTS-SP3: glibc, openEuler:24.03-LTS-SP4: glibc</p> <p>The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es):</p> <p>Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.(CVE-2026-6368)</p> <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&amp;apos;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.(CVE-2026-6791)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: glibc, openEuler:22.03-LTS-SP4: glibc, openEuler:24.03-LTS-SP1: glibc, openEuler:24.03-LTS-SP3: glibc, openEuler:24.03-LTS-SP4: glibc</p> <p>The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more. Security Fix(es):</p> <p>Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.(CVE-2026-6368)</p> <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&amp;apos;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.(CVE-2026-6791)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3418 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11660-1 <p>glibc-2.44-1.1 on GA media</p> <p>glibc-2.44-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11660-1 https://cve.radiocsirt.org/vuln/rhsa-2026:53069 <p>glibc: glibc: Process abort due to invalid memory in wordexp glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion</p> <p>glibc: glibc: Process abort due to invalid memory in wordexp glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion</p> https://cve.radiocsirt.org/vuln/rhsa-2026:53069 https://cve.radiocsirt.org/vuln/suse-su-2026:23738-1 <p>Security update for glibc</p> <p>Security update for glibc</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23738-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6791 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:26.04:LTS: glibc</p> <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&#39;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: eglibc, Ubuntu:Pro:16.04:LTS: glibc, Ubuntu:Pro:18.04:LTS: glibc, Ubuntu:Pro:20.04:LTS: glibc, Ubuntu:22.04:LTS: glibc, Ubuntu:24.04:LTS: glibc, Ubuntu:26.04:LTS: glibc</p> <p>When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user&#39;s home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this allocation was determined by the length of the user-supplied input without any bounds checks, passing an excessively long username e.g. thousands of characters, forces the thread to exhaust its stack space. Thus if an application passes untrusted, attacker-controlled input to the wordexp function, an attacker can trigger a stack clash.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6791