CLSA-2026-1784018158
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1784018158.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784018158
- Upstream
CVE (3)
- CVE-2026-33846
- CVE-2026-42009
- CVE-2026-5260
- Published
- 2026-07-14T08:36:17Z
- Modified
- 2026-10-26T09:32:03Z
- Summary
- Fix CVE(s): CVE-2026-33846, CVE-2026-42009, CVE-2026-5260
- Details
-
- SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly
- debian/patches/CVE-2026-33846.patch: add length-consistency and array bounds checks in merge_handshake_packet in lib/buffers.c to reject DTLS fragments with mismatching or oversized claimed length
- CVE-2026-33846
- SECURITY UPDATE: denial of service via non-conforming qsort comparator
- debian/patches/CVE-2026-42009.patch: return 0 for equal sequence numbers in handshake_compare in lib/buffers.c so DTLS packet ordering follows the qsort strict-weak-ordering contract
- CVE-2026-42009
- SECURITY UPDATE: heap over-read on short RSA-PSK ciphertext with PKCS#11 key
- debian/patches/CVE-2026-5260.patch: verify ciphertext size matches the RSA modulus in _gnutls_proc_rsa_psk_client_kx in lib/auth/rsa_psk.c and size the PKCS#11 decrypt buffer with MAX(siglen, plaintext_size) in lib/pkcs11_privkey.c (the RSA path uses the allocating decrypt API and is not affected)
- CVE-2026-5260
- SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly
- References