Every CVE Search/ Get API key

CVE-2026-40170

ngtcp2 has a qlog transport parameter serialization stack buffer overflow

7.5 HighFix available

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.78%Up 0.7 points since Apr 17, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

ngtcp2 has a qlog transport parameter serialization stack buffer overflow

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
CVE-2026-40170
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121, CWE-120
Updated
2026-11-02
EUVDEUVD-2026-23302 7.5

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
EUVD-2026-23302
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 7.5

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
CVE-2026-40170
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121, CWE-120
Updated
2026-11-02
OSVALPINE-CVE-2026-40170 7.5

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
ALPINE-CVE-2026-40170
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

ngtcp2 has a qlog transport parameter serialization stack buffer overflow

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
CVE-2026-40170
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2026-40170 7.5

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
DEBIAN-CVE-2026-40170
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 21 moreShow less
OSVRHSA-2026:22963 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:22963
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25049 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:25049
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:9113 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:9113
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:22963 9.0

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)

  • samba: vfs_worm does not block directory modification (CVE-2026-2340)

  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)

  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:22963
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:25049 9.0

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)

  • samba: vfs_worm does not block directory modification (CVE-2026-2340)

  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)

  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25049
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-40170 7.5

ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.

Record
UBUNTU-CVE-2026-40170
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:22963 No score

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)
  • samba: vfs_worm does not block directory modification (CVE-2026-2340)
  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:22963
Updated
2026-11-02
OSVALSA-2026:25049 No score

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)
  • samba: vfs_worm does not block directory modification (CVE-2026-2340)
  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25049
Updated
2026-11-02
OSVopenSUSE-SU-2026:10621-1 No score

libngtcp2-16-1.22.1-1.1 on GA media

These are all security issues fixed in the libngtcp2-16-1.22.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10621-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10884-1 No score

ctdb-4.23.8+git.477.f78166bceed-1.1 on GA media

These are all security issues fixed in the ctdb-4.23.8+git.477.f78166bceed-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10884-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11121-1 No score

corepack24-24.17.0-1.1 on GA media

These are all security issues fixed in the corepack24-24.17.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11121-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21058-1 No score

Security update for nodejs22

This update for nodejs22 fixes the following issues

Update to 22.23.0:

  • CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths and can cause a denial of service (bsc#1256576).
  • CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455).
  • CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463).
  • CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480).
  • CVE-2026-21715: permission model bypass in realpathSync.native can allow file existence disclosure (bsc#1260482).
  • CVE-2026-21716: promise-based FileHandle methods can be used to modify file permissions and ownership (bsc#1260462).
  • CVE-2026-21717: crafted request can lead to hash collisions trivially predictable (bsc#1260494).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
Record
openSUSE-SU-2026:21058-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21236-1 No score

Security update for nodejs24

This update for nodejs24 fixes the following issues

Update to version 24.18.0 (bsc#1269825).

Security issues fixed:

  • CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption (bsc#1268480).
  • CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9678: undici: information disclosure due to improper cache-control header parsing (bsc#1268478).
  • CVE-2026-9679: undici: HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: denial of service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: cross-site scripting due to improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: unicode dot separator handling can lead to TLS wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP response queue poisoning via TOCTOU race condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: WebCrypto AES integer overflow leads to remote process abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: permission model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).

Other updates and bugfixes:

  • Version 24.18.0:
    • doc: update blockList stability status to release candidate
    • fs: support caller-supplied readFile() buffers
    • http: close pre-request sockets in closeIdleConnections
    • loader: implement package maps
    • net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive
    • tls: add certificateCompression option
    • vfs: dispatch node:fs/promises to mounted VFS instances
    • vfs: add minimal node:vfs subsystem
  • For changes in older versions, see https://github.com/nodejs/node/releases.
  • Remove update-alternatives from scriptlets if not available.
  • Explicitly BuildRequire update-alternatives and mark it as being used in post/postun.
  • Add -fno-lifetime-dse to CXXFLAGS to avoid parallel/test-snapshot-reproducible testsuite failure with GCC 16.
Record
openSUSE-SU-2026:21236-1
Updated
2026-11-02
OSVSUSE-SU-2026:22368-1 No score

Security update for nodejs22

This update for nodejs22 fixes the following issues

Update to 22.23.0:

  • CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths and can cause a denial of service (bsc#1256576).
  • CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455).
  • CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463).
  • CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480).
  • CVE-2026-21715: permission model bypass in realpathSync.native can allow file existence disclosure (bsc#1260482).
  • CVE-2026-21716: promise-based FileHandle methods can be used to modify file permissions and ownership (bsc#1260462).
  • CVE-2026-21717: crafted request can lead to hash collisions trivially predictable (bsc#1260494).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
Record
SUSE-SU-2026:22368-1
Updated
2026-11-02
OSVSUSE-SU-2026:22565-1 No score

Security update for nodejs24

This update for nodejs24 fixes the following issues

Update to version 24.18.0 (bsc#1269825).

Security issues fixed:

  • CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption (bsc#1268480).
  • CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9678: undici: information disclosure due to improper cache-control header parsing (bsc#1268478).
  • CVE-2026-9679: undici: HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: denial of service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: cross-site scripting due to improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: unicode dot separator handling can lead to TLS wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP response queue poisoning via TOCTOU race condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: WebCrypto AES integer overflow leads to remote process abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: permission model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).

Other updates and bugfixes:

  • Version 24.18.0:
    • doc: update blockList stability status to release candidate
    • fs: support caller-supplied readFile() buffers
    • http: close pre-request sockets in closeIdleConnections
    • loader: implement package maps
    • net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive
    • tls: add certificateCompression option
    • vfs: dispatch node:fs/promises to mounted VFS instances
    • vfs: add minimal node:vfs subsystem
  • For changes in older versions, see https://github.com/nodejs/node/releases.
  • Remove update-alternatives from scriptlets if not available.
  • Explicitly BuildRequire update-alternatives and mark it as being used in post/postun.
  • Add -fno-lifetime-dse to CXXFLAGS to avoid parallel/test-snapshot-reproducible testsuite failure with GCC 16.
Record
SUSE-SU-2026:22565-1
Updated
2026-11-02
OSVSUSE-SU-2026:2633-1 No score

Security update for nodejs24

This update for nodejs24 fixes the following issues

Update to 24.17.0:

  • CVE-2026-2581: undici: Undici: Denial of Service due to uncontrolled resource consumption (bsc#1268480).
  • CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9678: undici: Undici: Information disclosure due to improper cache-control header parsing (bsc#1268478).
  • CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
Record
SUSE-SU-2026:2633-1
Updated
2026-11-02
OSVSUSE-SU-2026:2647-1 No score

Security update for nodejs22

This update for nodejs22 fixes the following issues

Update to 22.23.0:

  • CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
Record
SUSE-SU-2026:2647-1
Updated
2026-11-02
OSVSUSE-SU-2026:2695-1 No score

Security update for nodejs22

This update for nodejs22 fixes the following issues:

  • CVE-2026-48618: tls: normalize hostname for server identity checks (bsc#1268593).
  • CVE-2026-48933: crypto: guard WebCrypto cipher output length (bsc#1268592).
  • CVE-2026-48615: lib,test: redact proxy credentials in tunnel errors (bsc#1268598).
  • CVE-2026-48619: http2: cap originSet size to prevent unbounded memory growth (bsc#1268618).
  • CVE-2026-48928: tls: fix case-sensitive SNI context matching (bsc#1268605).
  • CVE-2026-48930: dns,net: reject hostnames with embedded NUL bytes (bsc#1268606).
  • CVE-2026-48934: tls: bind reusable sessions to authenticated host (bsc#1268608).
  • CVE-2026-48617: permission: handle process.chdir on writereport (bsc#1268554).
  • CVE-2026-48931: http: fix response queue poisoning in http.Agent (bsc#1268611).
  • CVE-2026-48935: permission: disable FileHandle utimes with permission model (bsc#1268609).
  • CVE-2026-48937: http2: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
  • CVE-2026-12151: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-6733: undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery ( bsc#1268479).
  • CVE-2026-9679: undici: vulnerable to HTTP header injection via Set-Cookie percent-decoding ( bsc#1268477).
  • CVE-2026-11525: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow. (bsc#1262274).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec ( bsc#1266318).
  • CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
Record
SUSE-SU-2026:2695-1
Updated
2026-11-02
OSVSUSE-SU-2026:3929-1 No score

Security update for nodejs20

This update for nodejs20 fixes the following issues:

  • CVE-2025-22150: undici: predictable random values used when defining the boundary for a multipart/form-data request (bsc#1236258).
  • CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9679: undici: HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: denial of service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-16728: undici: downstream response desynchronization via retry interceptor (bsc#1273593).
  • CVE-2026-16729: undici: setCookie function does not fully sanitize cookie attributes (bsc#1273591).
  • CVE-2026-22036: undici: unbounded decompression chain in HTTP responses via Content-Encoding may lead to resource exhaustion (bsc#1256848).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP response queue poisoning via TOCTOU race condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: WebCrypto AES integer overflow leads to remote process abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: permission model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
  • CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882).
  • CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits (bsc#1272941).
  • CVE-2026-56847: permission model allows trace events to write outside the allowlist (bsc#1272949).
  • CVE-2026-56848: HTTP/2 re-entrant send can cause heap use-after-free (bsc#1272942).
  • CVE-2026-56850: HTTPS agent can reuse mTLS identities across PFX certificates (bsc#1272944).
  • CVE-2026-58039: permission model allows process reports to write outside the allowlist (bsc#1272950).
  • CVE-2026-58040: HTTPS agent session reuse can skip hostname verification (bsc#1272945).
  • CVE-2026-58042: dns.resolveAny() can abort on DNS responses with many A records (bsc#1272947).
  • CVE-2026-58043: permission model path matching can over-grant filesystem access (bsc#1272943).
  • CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951).
  • CVE-2026-58045: node:zlib sync APIs can crash on spoofed TypedArray length (bsc#1272948).
  • CVE-2026-69192: ip-address: Address4…
Record
SUSE-SU-2026:3929-1
Updated
2026-11-02
OSVSUSE-SU-2026:3930-1 No score

Security update for nodejs20

This update for nodejs20 fixes the following issues:

  • CVE-2025-22150: undici: predictable random values used when defining the boundary for a multipart/form-data request (bsc#1236258).
  • CVE-2026-6733: undici: response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479).
  • CVE-2026-9496: pacote: excessive CPU consumption in addGitSha when processing a specially crafted spec.rawSpec value can lead to DoS (bsc#1266318).
  • CVE-2026-9679: undici: HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
  • CVE-2026-11525: undici: weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header (bsc#1268481).
  • CVE-2026-12151: undici: denial of service due to unbounded memory growth via WebSocket frames (bsc#1268482).
  • CVE-2026-16728: undici: downstream response desynchronization via retry interceptor (bsc#1273593).
  • CVE-2026-16729: undici: setCookie function does not fully sanitize cookie attributes (bsc#1273591).
  • CVE-2026-22036: undici: unbounded decompression chain in HTTP responses via Content-Encoding may lead to resource exhaustion (bsc#1256848).
  • CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
  • CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
  • CVE-2026-42338: ip-address: cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
  • CVE-2026-48615: proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
  • CVE-2026-48617: permission model enforcement bypass via process.report.writeReport() path misvalidation (bsc#1268554).
  • CVE-2026-48618: unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (bsc#1268593).
  • CVE-2026-48619: unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
  • CVE-2026-48928: uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname matching (bsc#1268605).
  • CVE-2026-48930: embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings (bsc#1268606).
  • CVE-2026-48931: HTTP response queue poisoning via TOCTOU race condition in http.Agent (bsc#1268611).
  • CVE-2026-48933: WebCrypto AES integer overflow leads to remote process abort (bsc#1268592).
  • CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to unauthorized connections (bsc#1268608).
  • CVE-2026-48935: permission model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
  • CVE-2026-48937: servers keep accepting data even after sending a GOAWAY frame (bsc#1268555).
  • CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882).
  • CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits (bsc#1272941).
  • CVE-2026-56847: permission model allows trace events to write outside the allowlist (bsc#1272949).
  • CVE-2026-56848: HTTP/2 re-entrant send can cause heap use-after-free (bsc#1272942).
  • CVE-2026-56850: HTTPS agent can reuse mTLS identities across PFX certificates (bsc#1272944).
  • CVE-2026-58039: permission model allows process reports to write outside the allowlist (bsc#1272950).
  • CVE-2026-58040: HTTPS agent session reuse can skip hostname verification (bsc#1272945).
  • CVE-2026-58042: dns.resolveAny() can abort on DNS responses with many A records (bsc#1272947).
  • CVE-2026-58043: permission model path matching can over-grant filesystem access (bsc#1272943).
  • CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951).
  • CVE-2026-58045: node:zlib sync APIs can crash on spoofed TypedArray length (bsc#1272948).
  • CVE-2026-69192: ip-address: Address4…
Record
SUSE-SU-2026:3930-1
Updated
2026-11-02
OSVUSN-8300-1 No score

ngtcp2 vulnerability

Zou Dikai discovered that ngtcp2 serialized peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog was enabled, a remote attacker could possibly use this issue to execute arbitrary code.

Record
USN-8300-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ngtcp2
Alpine:v3.20
 before 1.5.0-r1
1.5.0-r1
ngtcp2
Alpine:v3.21
 before 1.9.1-r1
1.9.1-r1
ngtcp2
Alpine:v3.22
 before 1.12.0-r1
1.12.0-r1
ngtcp2
Alpine:v3.23
 before 1.22.1-r0
1.22.1-r0
ngtcp2
Alpine:v3.24
 before 1.22.1-r0
1.22.1-r0
ldb-tools
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libldb
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libldb-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libnetapi
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libnetapi-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
libsmbclient
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libsmbclient-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libwbclient
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libwbclient-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-ldb
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-samba
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-samba-dc
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-samba-test
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-client
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-client-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-common
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-common-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-common-tools
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-dc-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-dcerpc
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-gpupdate
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-krb5-printing
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-ldb-ldap-modules
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-pidl
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-test
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-test-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-tools
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-usershares
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-vfs-iouring
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind-clients
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind-krb5-locator
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind-modules
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winexe
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
ldb-tools
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libldb
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libldb-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libnetapi
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libnetapi-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libsmbclient
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libsmbclient-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libwbclient
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libwbclient-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-ldb
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-samba
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-samba-dc
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-samba-test
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-client
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-client-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-common
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-common-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-common-tools
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-dc-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-dcerpc
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-gpupdate
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-krb5-printing
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-ldb-ldap-modules
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-pidl
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-test
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-test-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-tools
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-usershares
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-vfs-iouring
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-winbind
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-winbind-clients
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-winbind-krb5-locator
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-winbind-modules
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-winexe
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
ngtcp2
Debian:12
 before 0.12.1+dfsg-1+deb12u1, plus listed versions
0.12.1+dfsg-1
0.12.1+dfsg-1+deb12u1
ngtcp2
Debian:13
 before 1.11.0-1+deb13u1, plus listed versions
1.11.0-1
1.11.0-1+deb13u1
ngtcp2
Debian:14
 before 1.22.1-1, plus listed versions
1.11.0-11.12.0-1~exp11.15.1-11.16.0-11.16.0-1~bpo13+1
Show 4 moreShow less
1.16.0-1~bpo13+21.16.0-1~exp11.21.0-11.22.1-1~bpo13+1
1.22.1-1
ctdb-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
ldb-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libldb-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libnetapi-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libsmbclient-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libwbclient-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-ldb-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-samba-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-client
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-client-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-client-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-common-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-common-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-dc-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-dcerpc-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-gpupdate
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-krb5-printing
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-krb5-printing-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-ldb-ldap-modules-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-test-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-test-libs-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-vfs-iouring
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-vfs-iouring-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-clients
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-clients-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-krb5-locator
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-krb5-locator-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-modules-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winexe
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winexe-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
ldb-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libldb
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libnetapi
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libsmbclient
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libwbclient
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-ldb
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-samba
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-samba-dc
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-client-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-common
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-common-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-common-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-dc-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-dcerpc
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-ldb-ldap-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-usershares
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-winbind-modules
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libldb-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libnetapi-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libsmbclient-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
libwbclient-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
python3-samba-test
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-pidl
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-test
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba-test-libs
Red Hat:enterprise_linux:10.2
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
ctdb-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ldb-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libldb-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libnetapi-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libsmbclient-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libwbclient-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-ldb-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dc-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dcerpc-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-gpupdate
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-krb5-printing
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-krb5-printing-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-ldb-ldap-modules-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-vfs-iouring
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-vfs-iouring-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-clients
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-clients-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-krb5-locator
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-krb5-locator-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-modules-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winexe
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winexe-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ctdb-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ldb-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ldb-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libldb
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libldb-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libnetapi
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libnetapi-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libsmbclient
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libsmbclient-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libwbclient
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libwbclient-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-ldb
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-ldb-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-dc
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dc-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dc-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dcerpc
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dcerpc-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-krb5-printing-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-ldb-ldap-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-ldb-ldap-modules-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-libs
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-tools
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-usershares
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-vfs-iouring-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-clients-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-krb5-locator-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-modules-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winexe-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ctdb-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ldb-tools-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libldb-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libldb-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libnetapi-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libnetapi-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libsmbclient-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libsmbclient-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libwbclient-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libwbclient-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-ldb-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
python3-samba-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-client-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-common-tools-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dc-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-dcerpc-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-devel
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-krb5-printing-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-ldb-ldap-modules-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-pidl
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-libs
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-test-libs-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-vfs-iouring-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-clients-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-krb5-locator-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winbind-modules-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba-winexe-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ctdb
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ctdb-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
ldb-tools-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libldb-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libnetapi-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libsmbclient-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
libwbclient-debuginfo
Red Hat:enterprise_linux:9::resilientstorage
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba
Rocky Linux:10
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba
Rocky Linux:9
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
nodejs22
SUSE:Linux Enterprise Server 16.0
From an advisory covering 26 CVEs
 before 22.23.0-160000.1.1
22.23.0-160000.1.1
nodejs22
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 26 CVEs
 before 22.23.0-160000.1.1
22.23.0-160000.1.1
nodejs24
SUSE:Linux Enterprise Server 16.0
From an advisory covering 21 CVEs
 before 24.18.0-160000.1.1
24.18.0-160000.1.1
nodejs24
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 21 CVEs
 before 24.18.0-160000.1.1
24.18.0-160000.1.1
nodejs24
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 21 CVEs
 before 24.17.0-150700.15.11.1
24.17.0-150700.15.11.1
nodejs22
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 19 CVEs
 before 22.23.0-150600.13.18.1
22.23.0-150600.13.18.1
nodejs22
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 19 CVEs
 before 22.23.0-150600.13.18.1
22.23.0-150600.13.18.1
nodejs22
SUSE:Linux Enterprise Module for Web and Scripting 15 SP7
From an advisory covering 19 CVEs
 before 22.23.0-150700.3.12.1
22.23.0-150700.3.12.1
nodejs20
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 35 CVEs
 before 20.20.2-150600.3.21.1
20.20.2-150600.3.21.1
nodejs20
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 35 CVEs
 before 20.20.2-150600.3.21.1
20.20.2-150600.3.21.1
nodejs20
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 35 CVEs
 before 20.20.2-150500.11.30.1
20.20.2-150500.11.30.1
nodejs20
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 35 CVEs
 before 20.20.2-150500.11.30.1
20.20.2-150500.11.30.1
nodejs20
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 35 CVEs
 before 20.20.2-150500.11.30.1
20.20.2-150500.11.30.1
nodejs20
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 35 CVEs
 before 20.20.2-150500.11.30.1
20.20.2-150500.11.30.1
ngtcp2
Ubuntu:Pro:22.04:LTS
 before 0.1.0+dfsg-1ubuntu0.1~esm1, plus listed versions
0~20210905-10.1.0+dfsg-1
0.1.0+dfsg-1ubuntu0.1~esm1
ngtcp2
Ubuntu:24.04:LTS
 before 0.12.1+dfsg-1+deb12u1build0.24.04.1, plus listed versions
0.12.1+dfsg-10.12.1+dfsg-1build10.12.1+dfsg-1build2
0.12.1+dfsg-1+deb12u1build0.24.04.1
ngtcp2
Ubuntu:25.10
 before 1.11.0-1+deb13u1build0.25.10.1, plus listed versions
1.11.0-1
1.11.0-1+deb13u1build0.25.10.1
ngtcp2
Ubuntu:26.04:LTS
 before 1.16.0-1ubuntu0.1, plus listed versions
1.11.0-11.16.0-1
1.16.0-1ubuntu0.1
ngtcp2
openSUSE:Tumbleweed
 before 1.22.1-1.1
1.22.1-1.1
samba
openSUSE:Tumbleweed
From an advisory covering 7 CVEs
 before 4.23.8+git.477.f78166bceed-1.1
4.23.8+git.477.f78166bceed-1.1
nodejs24
openSUSE:Tumbleweed
From an advisory covering 21 CVEs
 before 24.17.0-1.1
24.17.0-1.1
nodejs22
openSUSE:Leap 16.0
From an advisory covering 26 CVEs
 before 22.23.0-160000.1.1
22.23.0-160000.1.1
nodejs24
openSUSE:Leap 16.0
From an advisory covering 21 CVEs
 before 24.18.0-160000.1.1
24.18.0-160000.1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-40170 is a high vulnerability (CVSS 7.5) in Ngtcp2, published April 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. Fixed in ngtcp2 1.5.0-r1.

References

Show 152 moreShow less
This page doesn't list everything

Left out here: 29 package rows and the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open