AZL-93270

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-93270.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-93270

Upstream

CVE-2026-6390

Published

2026-07-23T05:16:38Z

Modified

2026-08-28T17:47:39.760332073Z

Summary

CVE-2026-6390 affecting package nano 6.4-3

Details

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to achieve stack information disclosure, cause a denial of service (crash), or potentially perform arbitrary memory writes.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-6390

Affected packages

Azure Linux:3 / nano

Package

Name: nano
Purl: pkg:rpm/azure-linux/nano

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

6.4-3

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-93270.json"