NIXPKGS-2026-1304

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-6528

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
4 months, 2 weeks ago maintainer.ignore
@LeSuisse published on GitHub 4 months, 2 weeks ago

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Wireshark

<4.6.5

NIXPKGS-2026-1303

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-6869

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
4 months, 2 weeks ago maintainer.ignore
@LeSuisse published on GitHub 4 months, 2 weeks ago

Improperly Controlled Sequential Memory Allocation in Wireshark

Wireshark

<4.6.5
<4.4.15

NIXPKGS-2026-1302

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-7375

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
4 months, 2 weeks ago maintainer.ignore
@LeSuisse published on GitHub 4 months, 2 weeks ago

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Wireshark

<4.4.15
<4.6.5

NIXPKGS-2026-1301

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-6522

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse ignored
2 maintainers
- @fpletz
- @bjornfor
4 months, 2 weeks ago maintainer.ignore
@LeSuisse published on GitHub 4 months, 2 weeks ago

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Wireshark

<4.6.5
<4.4.15

NIXPKGS-2026-1300

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-6868

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse published on GitHub 4 months, 2 weeks ago

Stack-based Buffer Overflow in Wireshark

Wireshark

<4.4.15
<4.6.5

NIXPKGS-2026-1299

GitHub issue published 4 months, 2 weeks ago

          Permalink
          
            CVE-2026-5402
          
        8.8 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          4 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          4 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @fpletz
@bjornfor

          4 months, 2 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          4 months, 2 weeks ago
          
            Heap-based Buffer Overflow in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-14.html
    
      GitLab Issue #21090
    
    issue-trackingpermissions-required
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21090
    
    exploit
  
    Wireshark

            <4.6.5

NIXPKGS-2026-1298

GitHub issue published 4 months, 2 weeks ago

          Permalink
          
            CVE-2026-5654
          
        5.5 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 months, 2 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          4 months, 2 weeks ago
          
          @LeSuisse
          
              accepted
            
          4 months, 2 weeks ago
          
          @LeSuisse
          
              ignored
            
                2 maintainers
                @bjornfor
@fpletz

          4 months, 2 weeks ago
          
              maintainer.ignore
            
          @LeSuisse
          
              published on GitHub
            
          4 months, 2 weeks ago
          
            Stack-based Buffer Overflow in Wireshark
          
      https://www.wireshark.org/security/wnpa-sec-2026-18.html
    
      GitLab Issue #21111
    
    permissions-requiredissue-tracking
  
      https://gitlab.com/wireshark/wireshark/-/work_items/21111
    
    exploit
  
    Wireshark

            <4.6.5
          
            <4.4.15

NIXPKGS-2026-1297

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-6520

5.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse ignored
2 maintainers
- @bjornfor
- @fpletz
4 months, 2 weeks ago maintainer.ignore
@LeSuisse published on GitHub 4 months, 2 weeks ago

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Wireshark

<4.6.5
<4.4.15

NIXPKGS-2026-1296

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-5405

7.8 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): Required (R)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): Required (R)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse ignored
2 maintainers
- @bjornfor
- @fpletz
4 months, 2 weeks ago maintainer.ignore
@LeSuisse published on GitHub 4 months, 2 weeks ago

Heap-based Buffer Overflow in Wireshark

https://www.wireshark.org/security/wnpa-sec-2026-17.html
GitLab Issue #21105 permissions-requiredissue-tracking

Wireshark

<4.6.5
<4.4.15

NIXPKGS-2026-1295

GitHub issue published 4 months, 2 weeks ago

Permalink CVE-2026-42248

updated 4 months, 2 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 2 weeks ago
@LeSuisse ignored reference https://o… 4 months, 2 weeks ago
@LeSuisse ignored
21 packages
- gollama
- nextjs-ollama-llm-ui
- python312Packages.ollama
- python313Packages.ollama
- python314Packages.ollama
- python312Packages.llm-ollama
- python313Packages.llm-ollama
- python314Packages.llm-ollama
- haskellPackages.ollama-haskell
- gnomeExtensions.ollama-indicator
- python312Packages.langchain-ollama
- python313Packages.langchain-ollama
- python314Packages.langchain-ollama
- home-assistant-component-tests.ollama
- tests.home-assistant-components.ollama
- python312Packages.llama-index-llms-ollama
- python313Packages.llama-index-llms-ollama
- python312Packages.llama-index-embeddings-ollama
- python313Packages.llama-index-embeddings-ollama
- pkgsRocm.python3Packages.llama-index-llms-ollama
- pkgsRocm.python3Packages.llama-index-embeddings-ollama
4 months, 2 weeks ago
@LeSuisse accepted 4 months, 2 weeks ago
@LeSuisse published on GitHub 4 months, 2 weeks ago

Missing Signature Verification for Updates in Ollama

https://cert.pl/en/posts/2026/04/CVE-2026-42248/ third-party-advisory

Ignored references (1)

https://ollama.com/ product

Ollama

=<0.17.5

Nixpkgs security tracker

Published issues

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Improperly Controlled Sequential Memory Allocation in Wireshark

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Stack-based Buffer Overflow in Wireshark

Heap-based Buffer Overflow in Wireshark

Stack-based Buffer Overflow in Wireshark

Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Heap-based Buffer Overflow in Wireshark

Missing Signature Verification for Updates in Ollama