CLSA-2026-1789569581
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1789569581.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1789569581
- Upstream
- Published
- 2026-09-16T14:39:50Z
- Modified
- 2026-10-26T09:32:03Z
- Summary
- Fix CVE(s): CVE-2026-70456
- Details
-
- SECURITY UPDATE: Out-of-bounds heap write in daemon argument parsing
- debian/patches/CVE-2026-70456.patch: grow argv to argc + 1 entries in read_args() (io.c) before storing the trailing NULL, so a post-dot daemon request whose glob expansion lands argc exactly on maxargs no longer writes one pointer slot past the end of the argv allocation
- CVE-2026-70456
- SECURITY UPDATE: Out-of-bounds heap write in daemon argument parsing
- References