CLSA-2026-1784712190
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1784712190.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784712190
- Upstream
CVE (2)
- Published
- 2026-10-18T22:57:31Z
- Modified
- 2026-10-26T09:32:05Z
- Summary
- Fix CVE(s): CVE-2026-42533, CVE-2026-60005
- Details
-
- SECURITY UPDATE: heap buffer overflow in nginx worker via map+regex
capture variables in script engine
- debian/patches/CVE-2026-42533.patch: backport upstream commits ea47fabf55e2 (Script: simplified copy capture codes), 7ac67898bdfe (Script: buffer overrun protection), 326b17b00383 (Script: buffer overrun protection in direct script usage), 78950bdcd443 (Access log: buffer overrun protection), b99f804ad38a (Fixed uninitialized memory read caused by stale regex captures), and 97e40e59b7b4 (Script: avoid garbage at the end of the result string); add e->end pointer and ngx_http_script_check_length() guard to all script copy code paths, reset r->ncaptures on regex reallocation, and thread params_len / headers_len through fastcgi, grpc, scgi, uwsgi upstream request builders so an attacker-controlled map+regex expansion can no longer overrun the assembled request or access log buffer
- CVE-2026-42533
- SECURITY UPDATE: heap buffer overflow in nginx worker via map+regex
capture variables in script engine
- References