CVE-2026-68768

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

hashcat contains a heap-based buffer overflow (out-of-bounds write) in the outfile_write() function in src/outfile.c. When assembling output into a fixed-size buffer (HCBUFSIZ_LARGE, ~16 MB), the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that the accumulated length stays within the buffer capacity. When run with --username --show against a crafted hash file containing an oversized username that nearly fills the buffer, the total assembled output exceeds the buffer, causing a heap buffer overflow that can corrupt memory and crash the process.

These are all security issues fixed in the hashcat-7.1.2+git942-1.1 package on the GA media of openSUSE Tumbleweed.

This update for hashcat fixes the following issues:

Changes in hashcat:

Update to snapshot v7.1.2-942-gef3508ed8:

• Addressed CVE-2026-68768 [boo#1276256], CVE-2026-68767 [boo#1276255], CVE-2026-68766 [boo#1276254]
• Feed plugins and attack-mode 8
• Probability-ordered PCFG and targeted hints in attack-mode 4
• Device-accelerated table attacks in attack-mode 5
• Wordlists inside masks with attack-mode 12
• Account-aware association in attack-mode 9
• Seekable wordlists and one cache location
• A brain server built for large sessions
• Rules in every attack-mode
• A Python bridge that uses every CPU thread

Update to release 7.1.2:

• New algorithms: AS/400 DES, AS/400 SHA1, Cisco-ISE SHA256, LUKS2-Argon2i KDF, KeePass KDBX v4, SAP CODVN H SHA512, sm3crypt, BLAKE2b-256, MD6, sha224

• Use BUILD_MODE=cross to not optimize for build machine CPU (boo#1248352)

Update to release 7.0.0:

• Full release notes at /usr/share/doc/packages/hashcat/docs/releases_notes_v7.0.0.md
• Assimilation Bridge: Integrate external resources like CPUs, FPGAs, embedded interpreters, and more into the cracking pipeline.
• Python Bridge Plugin: Rapidly implement hash-matching logic in Python. No recompilation needed, supports multithreading and rule engine by default.
• Virtual Backend Devices: Internally partitions physical GPUs into multiple logical devices for better bridge integration and async workloads.
• Hash-Mode Autodetection: Omit the -m flag and let Hashcat detect the hash-mode, or use --identify to list possibilities.
• 58 new application-specific hash types, including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2
• 17 new generic hash constructions used in real-world web apps and protocols
• 11 new primitives added to the crypto library, improving reuse and plugin development
• 20 new tools to extract hashes from popular sources, including APFS, Virtualbox, BitLocker, and various wallet formats
• Complete refactor of the autotuning engine for better device utilization
• Major rewrite of memory management to eliminate previous 4GB allocation caps and enable full memory usage across devices