CLSA-2026-1783689031
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1783689031.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1783689031
- Upstream
CVE (3)
- CVE-2026-33846
- CVE-2026-42009
- CVE-2026-5260
- Published
- 2026-07-10T13:10:48Z
- Modified
- 2026-10-26T09:32:05Z
- Summary
- Fix CVE(s): CVE-2026-33846, CVE-2026-42009, CVE-2026-5260
- Details
-
- SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly
- debian/patches/CVE-2026-33846.patch: add length-consistency and array bounds checks in merge_handshake_packet in lib/buffers.c to reject DTLS fragments with mismatching or oversized claimed length
- CVE-2026-33846
- SECURITY UPDATE: denial of service via non-conforming qsort comparator
- debian/patches/CVE-2026-42009.patch: return 0 for equal sequence numbers in handshake_compare in lib/buffers.c so DTLS packet ordering follows the qsort strict-weak-ordering contract
- CVE-2026-42009
- SECURITY UPDATE: heap over-read on short RSA ciphertext with PKCS#11 key
- debian/patches/CVE-2026-5260.patch: verify ciphertext size matches the RSA modulus in proc_rsa_client_kx and _gnutls_proc_rsa_psk_client_kx (lib/auth/rsa.c, lib/auth/rsa_psk.c) and size the PKCS#11 decrypt buffer with MAX(siglen, plaintext_size) in lib/pkcs11_privkey.c
- CVE-2026-5260
- SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly
- References