https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 20:43:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-357765 EUVD-2026-357765 https://cve.radiocsirt.org/vuln/euvd-2026-357765 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8836 <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.</p> <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8836 https://cve.radiocsirt.org/vuln/ghsa-3w8m-3w76-f6mh <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue.</p> <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3w8m-3w76-f6mh https://cve.radiocsirt.org/vuln/oesa-2026-2480 <p><strong>Affected:</strong> openEuler:24.03-LTS: lwip, openEuler:24.03-LTS-SP1: lwip, openEuler:24.03-LTS-SP3: lwip, openEuler:20.03-LTS-SP4: lwip, openEuler:22.03-LTS-SP4: lwip</p> <p>lwip is a small independent implementation of the TCP/IP protocol suite. Security Fix(es):</p> <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue.(CVE-2026-8836)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: lwip, openEuler:24.03-LTS-SP1: lwip, openEuler:24.03-LTS-SP3: lwip, openEuler:20.03-LTS-SP4: lwip, openEuler:22.03-LTS-SP4: lwip</p> <p>lwip is a small independent implementation of the TCP/IP protocol suite. Security Fix(es):</p> <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue.(CVE-2026-8836)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2480 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8836 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: lwip, Ubuntu:Pro:22.04:LTS: lwip, Ubuntu:Pro:24.04:LTS: lwip, Ubuntu:25.10: lwip, Ubuntu:Pro:26.04:LTS: lwip</p> <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: lwip, Ubuntu:Pro:22.04:LTS: lwip, Ubuntu:Pro:24.04:LTS: lwip, Ubuntu:25.10: lwip, Ubuntu:Pro:26.04:LTS: lwip</p> <p>A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-based buffer overflow. The attack may be initiated remotely. The patch is named 0c957ec03054eb6c8205e9c9d1d05d90ada3898c. It is suggested to install a patch to address this issue. Two separate issue reports were submitted to the project. Their processing was merged as a duplicate.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8836