{"schema_version":"1","data":[{"id":25613,"advisory_id":"301e58c6-98d7-477f-8288-8b281206f668","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-32665","source_published_at":"2023-09-14T19:03:58.229+00:00","published_at":"2026-10-25T06:55:07.931549+00:00","extraction_method":"structured","technologies":["core-cve","extra-packages-for-enterprise-linux","fedora","fedora-37","fedora-38","glib2","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-32665"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Gvariant deserialisation does not match spec for non-normal data","summary":"A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.","evidence":"cve:CVE-2023-32665","products":[{"name":{"value":"glib2","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 38","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Extra Packages for Enterprise Linux","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 37","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 38","evidence":"/containers/cna/affected/9/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora 37","evidence":"/containers/cna/affected/10/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-32665","aliases":["CVE-2023-32665"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glib2","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unknown"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glib2","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 38","packageName":"glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Extra Packages for Enterprise Linux","packageName":"glib","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora","packageName":"glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 37","packageName":"glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 38","packageName":"mingw-glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"},{"vendor":"Fedora","product":"Fedora 37","packageName":"mingw-glib2","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T23:17:13.566Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-32665","https://bugzilla.redhat.com/show_bug.cgi?id=2211827","https://gitlab.gnome.org/GNOME/glib/-/issues/2121","https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html","https://security.gentoo.org/glsa/202311-18","https://security.netapp.com/advisory/ntap-20240426-0006/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-32665","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2023-11-27T17:04:41.563399Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-07-24T19:16:35.238Z"}},{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-32665","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211827","name":"RHBZ#2211827","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://gitlab.gnome.org/GNOME/glib/-/issues/2121","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00030.html","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202311-18","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240426-0006/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T15:25:36.651Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.0","lessThan":"V3.1.5","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T23:17:13.566Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-04-26T09:06:01.299Z"}}},"related_cves":[{"value":"CVE-2023-32665","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24297,"advisory_id":"c8e526ec-b687-43a8-aa37-e8ed1b9998f1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6779","source_published_at":"2024-01-31T14:07:41.967+00:00","published_at":"2026-10-25T06:33:09.974917+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6779"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()","summary":"An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INT_MAX bytes, leading to an incorrect calculation of the buffer size to store the message, resulting in an application crash. This issue affects glibc 2.37 and newer.","evidence":"cve:CVE-2023-6779","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6779","aliases":["CVE-2023-6779"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.2,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:19.456Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6779","https://bugzilla.redhat.com/show_bug.cgi?id=2254395","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","https://security.netapp.com/advisory/ntap-20240223-0006/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6779","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254395","name":"RHBZ#2254395","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240223-0006/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:42:07.403Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6779","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-06-13T16:08:30.700931Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-13T16:08:42.227Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:19.456Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-02-23T16:05:57.859Z"}}},"related_cves":[{"value":"CVE-2023-6779","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24295,"advisory_id":"efb8afea-2a97-4b03-b0b2-bebf9c7379e1","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6780","source_published_at":"2024-01-31T14:08:02.61+00:00","published_at":"2026-10-25T06:33:08.581146+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6780"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: integer overflow in __vsyslog_internal()","summary":"An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.","evidence":"cve:CVE-2023-6780","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-6780","aliases":["CVE-2023-6780"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Low","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:20.900Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6780","https://bugzilla.redhat.com/show_bug.cgi?id=2254396","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6780","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254396","name":"RHBZ#2254396","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20250207-0010/"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-02-07T17:02:41.644Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6780","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-01-31T16:36:34.378685Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-17T21:29:19.534Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:20.900Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-03-26T15:30:47.720Z"}}},"related_cves":[{"value":"CVE-2023-6780","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":24293,"advisory_id":"899fe0cb-2a44-44fa-b0b8-921c86d4ecc8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-6246","source_published_at":"2024-01-31T14:06:21.949+00:00","published_at":"2026-10-25T06:33:07.419804+00:00","extraction_method":"structured","technologies":["core-cve","fedora","glibc","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-6246"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Glibc: heap-based buffer overflow in __vsyslog_internal()","summary":"A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argument set to NULL, and the program name (the basename of argv[0]) is bigger than 1024 bytes, resulting in an application crash or local privilege escalation. This issue affects glibc 2.36 and newer.","evidence":"cve:CVE-2023-6246","products":[{"name":{"value":"glibc","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2023-6246","aliases":["CVE-2023-6246"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.4,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"n/a","product":"glibc","versions":[{"status":"unaffected","version":"2.39"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"compat-glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"glibc","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"glibc","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T22:15:16.680Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-6246","https://bugzilla.redhat.com/show_bug.cgi?id=2249053","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","https://security.gentoo.org/glsa/202402-01","https://www.openwall.com/lists/oss-security/2024/01/30/6","https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","https://security.netapp.com/advisory/ntap-20240216-0007/"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://packetstormsecurity.com/files/176931/glibc-qsort-Out-Of-Bounds-Read-Write.html","tags":["x_transferred"]},{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/5","tags":["x_transferred"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6246","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249053","name":"RHBZ#2249053","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202402-01","tags":["x_transferred"]},{"url":"https://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["x_transferred"]},{"url":"https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20240216-0007/","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:21:18.105Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6246","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2024-02-09T05:00:28.307432Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-10-17T17:53:03.744Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","versions":[{"status":"affected","version":"V3.1.5","lessThan":"*","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T22:15:16.680Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-02-16T13:05:53.547Z"}}},"related_cves":[{"value":"CVE-2023-6246","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":23221,"advisory_id":"3a77199a-8d31-4cbf-a962-19048523cbb5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-3338","source_published_at":"2023-06-30T00:00:00+00:00","published_at":"2026-10-25T06:15:11.487499+00:00","extraction_method":"structured","technologies":["core-cve","fedora","kernel","red-hat-enterprise-linux-6","red-hat-enterprise-linux-7","red-hat-enterprise-linux-8","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2023-3338"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Crash due to a null pointer dereference in the dn_nsp_send function","summary":"A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.","evidence":"cve:CVE-2023-3338","products":[{"name":{"value":"kernel","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 6","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 7","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 8","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/6/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/7/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Fedora","evidence":"/containers/cna/affected/8/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2023-3338","aliases":["CVE-2023-3338"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"n/a","product":"kernel","versions":[{"status":"unaffected","version":"6.5-rc1"}]},{"cpes":["cpe:/o:redhat:enterprise_linux:6"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:7"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:8"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"kernel-rt","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","packageName":"kernel","collectionURL":"https://packages.fedoraproject.org/","defaultStatus":"affected"}],"modified":"2026-10-14T20:51:32.938Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2023-3338","https://bugzilla.redhat.com/show_bug.cgi?id=2218618","https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","https://seclists.org/oss-sec/2023/q2/276","https://security.netapp.com/advisory/ntap-20230824-0005/","https://www.debian.org/security/2023/dsa-5480"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-3338","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218618","name":"RHBZ#2218618","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html","tags":["x_transferred"]},{"url":"https://seclists.org/oss-sec/2023/q2/276","tags":["x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20230824-0005/","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5480","tags":["x_transferred"]}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T06:55:03.281Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-3338","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-03-05T18:41:18.404363Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-03-05T18:55:11.038Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","versions":[{"status":"affected","version":"0","lessThan":"V1.1","versionType":"custom"}],"defaultStatus":"unknown"}],"x_adpType":"supplier","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html"}],"providerMetadata":{"orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","shortName":"siemens-SADP","dateUpdated":"2026-10-14T20:51:32.938Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2024-01-23T02:34:01.241Z"}}},"related_cves":[{"value":"CVE-2023-3338","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}},{"id":8042,"advisory_id":"05625282-ba44-4980-8526-58356f0834a8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-94422","source_published_at":"2026-10-02T13:54:10.589+00:00","published_at":"2026-10-24T22:54:41.967246+00:00","extraction_method":"structured","technologies":["core-cve","fedora","red-hat-enterprise-linux-10","red-hat-enterprise-linux-9"],"cve_ids":["CVE-2026-94422"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape","summary":"An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox. xdg-dbus-proxy was designed to be part of the sandbox boundary for Flatpak, but it is released as a separate project and is sometimes used by other app frameworks such as Firejail.","evidence":"cve:CVE-2026-94422","products":[{"name":{"value":"Fedora","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 9","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Red Hat Enterprise Linux 10","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-94422","aliases":["CVE-2026-94422"],"metrics":[{"other":{"type":"Red Hat severity rating","content":{"value":"Important","namespace":"https://access.redhat.com/security/updates/classification/"}}},{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"format":"CVSS","cvssV4_0":{"version":"4.0","baseScore":8.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","userInteraction":"PASSIVE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"affected":[{"versions":[{"status":"affected","version":"0","lessThan":"0.1.9","versionType":"semver"}],"packageName":"xdg-dbus-proxy","collectionURL":"https://github.com/flatpak/xdg-dbus-proxy","defaultStatus":"unaffected"},{"vendor":"Fedora","product":"Fedora","versions":[{"status":"affected","version":"0","lessThan":"0.1.9","versionType":"semver"}],"packageName":"xdg-dbus-proxy","collectionURL":"https://bodhi.fedoraproject.org/updates/?packages=xdg-dbus-proxy","defaultStatus":"unaffected"},{"cpes":["cpe:/o:redhat:enterprise_linux:9"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"xdg-dbus-proxy","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"},{"cpes":["cpe:/o:redhat:enterprise_linux:10"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"xdg-dbus-proxy","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","defaultStatus":"affected"}],"modified":"2026-10-24T03:08:12.584Z","provider":"cve","references":["https://access.redhat.com/security/cve/CVE-2026-94422","https://github.com/flatpak/xdg-dbus-proxy/security/advisories/GHSA-2cgv-pwcq-wvpq","https://github.com/flatpak/xdg-dbus-proxy/commit/e5702fca4dba9600721921fbca2dbc39dc5ca400","https://github.com/flatpak/xdg-dbus-proxy/commit/fc027f759316fb2a6c45648200b6f100202eb84e","https://github.com/flatpak/xdg-dbus-proxy/commit/e4465a0dfe96da3b39929a30a1ac3a22b16223e3","https://bugzilla.redhat.com/show_bug.cgi?id=2542235"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.openwall.com/lists/oss-security/2026/09/23/5"},{"url":"https://lists.debian.org/debian-lts-announce/2026/10/msg00050.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-10-24T03:08:12.584Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-94422","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-02T16:51:24.840136Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T16:51:40.902Z"}}],"cna":{"orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat","dateUpdated":"2026-10-02T13:54:10.589Z"}}},"related_cves":[{"value":"CVE-2026-94422","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":25613,"next_before":8042}