CLSA-2026-1791403476
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791403476.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791403476
- Upstream
CVE (2)
- CVE-2026-94054
- CVE-2026-94056
- Published
- 2026-10-07T20:04:49Z
- Modified
- 2026-10-26T09:31:40Z
- Summary
- Fix CVE(s): CVE-2026-94054, CVE-2026-94056
- Details
-
- SECURITY UPDATE: out-of-bounds access in Proxy-Protocol v1 header
parsing with an attacker-controlled proxy
- debian/patches/CVE-2026-94054.patch: set ret to the length of the heap copy of the PROXY v1 line instead of adding the swallow_until_crlf() count, so the memchr() for the CR stays inside the copy
- CVE-2026-94054
- SECURITY UPDATE: uninitialised stack data read on a short
Proxy-Protocol v2 header from an attacker-controlled proxy
- debian/patches/CVE-2026-94056.patch: repeat the read of the v2 length fields until all 16 header octets have arrived, and abort on EOF or error instead of using uninitialised length data
- CVE-2026-94056
- SECURITY UPDATE: out-of-bounds access in Proxy-Protocol v1 header
parsing with an attacker-controlled proxy
- References