NIXPKGS-2026-1174

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-40333

6.1 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-hq94-cp6h-3gjp x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/1817ecead20c2aafa7549dac9619fe38f47b2f53 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1173

GitHub issue published 4 months, 4 weeks ago

          Permalink
          
            CVE-2026-28212
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              ignored
            
              package firebird-emu
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          4 months, 4 weeks ago
          
            Firebird has potential server crash via null pointer dereference when processing op_slice packet
          
      https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-9884-9qm3-hqch
    
    x_refsource_CONFIRM
  
          Ignored references (3)
        
      https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14
    
    x_refsource_MISC
  
      https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7
    
    x_refsource_MISC
  
      https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4
    
    x_refsource_MISC
  
    firebird

            ==< 3.0.14
          
            ==>= 4.0.0, < 4.0.7
          
            ==>= 5.0.0, < 5.0.4

NIXPKGS-2026-1172

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-5720

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored package miniupnpd-nftables 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

miniupnpd Integer Underflow SOAPAction Header Parsing

https://github.com/miniupnp/miniupnp/commit/a0ee71e9fa66b60052bb3d2cf84380b79db…

Ignored references (2)

https://github.com/miniupnp/miniupnp/ product
https://www.vulncheck.com/advisories/miniupnpd-integer-underflow-soapaction-hea… third-party-advisory

miniupnpd

<2.3.10

NIXPKGS-2026-1171

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-32623

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored package pulseaudio-module-xrdp 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-phw3-qp59-x2v4 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1170

GitHub issue published 4 months, 4 weeks ago

          Permalink
          
            CVE-2026-6507
          
        7.5 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): None (N)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): None (N)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              ignored
            
              package prometheus-dnsmasq-exporter
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          4 months, 4 weeks ago
          
            Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing
          
      https://access.redhat.com/security/cve/CVE-2026-6507
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2459181
    
    x_refsource_REDHATissue-tracking
  
    rhcos

    dnsmasq

NIXPKGS-2026-1169

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-40293

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): Low (L)
Availability (A): None (N)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): Low (L)
Modified Availability (MA): None (N)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored
4 packages
- openfga-cli
- python312Packages.openfga-sdk
- python313Packages.openfga-sdk
- python314Packages.openfga-sdk
4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

OpenFGA Playground Preshared Key Exposure

https://github.com/openfga/openfga/security/advisories/GHSA-68m9-983m-f3v5 x_refsource_CONFIRM

Ignored references (1)

https://github.com/openfga/openfga/releases/tag/v1.14.0 x_refsource_MISC

openfga

==>= 0.1.4, < 1.14.0

NIXPKGS-2026-1168

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-29013

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling

https://github.com/obgm/libcoap/commit/b7847c4dbb0dbee7c90b09a673d4cae256f03718 patch

Ignored references (1)

https://www.vulncheck.com/advisories/libcoap-out-of-bounds-read-in-oscore-cbor-… third-party-advisory

libcoap

<v4.3.5b

NIXPKGS-2026-1167

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-32105

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse ignored package pulseaudio-module-xrdp 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-j2jm-c596-c5q3 x_refsource_CONFIRM

Ignored references (1)

https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 x_refsource_MISC

xrdp

==< 0.10.6

NIXPKGS-2026-1166

GitHub issue published 4 months, 4 weeks ago

Permalink CVE-2026-40341

3.5 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Physical (P)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): Low (L)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Physical (P)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): Low (L)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 4 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 4 months, 4 weeks ago
@LeSuisse accepted 4 months, 4 weeks ago
@LeSuisse published on GitHub 4 months, 4 weeks ago

libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx

https://github.com/gphoto/libgphoto2/security/advisories/GHSA-vjx3-gjp6-r2g2 x_refsource_CONFIRM
https://github.com/gphoto/libgphoto2/commit/c385b34af260595dfbb5f9329526be5158985987 x_refsource_MISC

libgphoto2

==<= 2.5.33

NIXPKGS-2026-1164

GitHub issue published 4 months, 4 weeks ago

          Permalink
          
            CVE-2026-28224
          
        8.2 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): None (N)
        
          Integrity (I): Low (L)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): None (N)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): High (H)
        
              updated
            
          4 months, 4 weeks ago
          by @LeSuisse
        
      Activity log
    
              Created suggestion
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              ignored
            
              package firebird-emu
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              accepted
            
          4 months, 4 weeks ago
          
          @LeSuisse
          
              published on GitHub
            
          4 months, 4 weeks ago
          
            Firebird Null Pointer Dereference via CryptCallback causes DOS
          
      https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-xrcw-wpjx-pr95
    
    x_refsource_CONFIRMexploit
  
          Ignored references (3)
        
      https://github.com/FirebirdSQL/firebird/releases/tag/v3.0.14
    
    x_refsource_MISC
  
      https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.7
    
    x_refsource_MISC
  
      https://github.com/FirebirdSQL/firebird/releases/tag/v5.0.4
    
    x_refsource_MISC
  
    firebird

            ==>= 4.0.0, < 4.0.7
          
            ==>= 5.0.0, < 5.0.4
          
            ==>= 3.0.0, < 3.0.14

Nixpkgs security tracker

Published issues

libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c

Firebird has potential server crash via null pointer dereference when processing op_slice packet

miniupnpd Integer Underflow SOAPAction Header Parsing

xrdp: Heap buffer overflow in NeutrinoRDP channel reassembly

Dnsmasq: dnsmasq: denial of service due to out-of-bounds write in dhcp bootreply processing

OpenFGA Playground Preshared Key Exposure

libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling

xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx

Firebird Null Pointer Dereference via CryptCallback causes DOS