Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    RHSA-2026:7349

    Vulnerability from csaf_redhat - Published: 2026-04-09 19:44 - Updated: 2026-09-08 06:38
    Summary
    Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
    Severity
    Moderate
    Scope
    1 vulnerability in this advisory, including CVE-2026-3836.
    CVE-2026-3836

    A flaw was found in dnf5. A local, unprivileged attacker can exploit a path traversal vulnerability in the D-Bus locale configuration. By providing a specially crafted string to the locale key during session opening, the attacker can force the dnf5daemon-server to terminate, leading to an application-level Denial of Service (DoS) with a core dump.

    5.5 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    Fixed: 4 products
    https://access.redhat.com/errata/RHSA-2026:7349
    Open the full advisory

    UBUNTU-CVE-2026-3836 (CVE-2026-3836)

    Vulnerability from osv_ubuntu – Published: 2026-03-26 00:00 – Updated: 2026-05-20 15:24 – Source website
    VLAI
    Details

    [Unknown description]

    Severity
    N/A (UNKNOWN)
    medium
    References
    To clipboard 

    {
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "dnf5",
            "binary_version": "5.4.0.0-1"
          },
          {
            "binary_name": "dnf5-server",
            "binary_version": "5.4.0.0-1"
          },
          {
            "binary_name": "libdnf5-2",
            "binary_version": "5.4.0.0-1"
          },
          {
            "binary_name": "libdnf5-cli3",
            "binary_version": "5.4.0.0-1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "dnf5",
        "purl": "pkg:deb/ubuntu/dnf5@5.4.0.0-1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.4.0.0-1"
      ]
    }
  ],
  "aliases": [],
  "details": "[Unknown description]",
  "id": "UBUNTU-CVE-2026-3836",
  "modified": "2026-05-20T15:24:29Z",
  "published": "2026-03-26T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-3836"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3836"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445770"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-3836"
  ]
}