206 lines
8.3 KiB
JSON
206 lines
8.3 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-19477",
|
||
"assignerOrgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "NI",
|
||
"dateReserved": "2026-08-10T14:54:21.681Z",
|
||
"datePublished": "2026-09-17T18:42:17.190Z",
|
||
"dateUpdated": "2026-09-28T15:49:05.252Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
|
||
"shortName": "NI",
|
||
"dateUpdated": "2026-09-28T15:49:05.252Z"
|
||
},
|
||
"title": "Stack-based Buffer Overflow Vulnerability in Linux (uldaq)",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"cweId": "CWE-121",
|
||
"description": "CWE-121 Stack-based buffer overflow",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"impacts": [
|
||
{
|
||
"capecId": "CAPEC-100",
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "CAPEC-100 Overflow Buffers"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "MCC",
|
||
"product": "Universal Library for Linux (uldaq)",
|
||
"versions": [
|
||
{
|
||
"status": "affected",
|
||
"version": "0",
|
||
"lessThanOrEqual": "1.2.1",
|
||
"versionType": "semver"
|
||
}
|
||
],
|
||
"defaultStatus": "unaffected"
|
||
}
|
||
],
|
||
"cpeApplicability": [
|
||
{
|
||
"operator": "OR",
|
||
"nodes": [
|
||
{
|
||
"operator": "OR",
|
||
"negate": false,
|
||
"cpeMatch": [
|
||
{
|
||
"vulnerable": true,
|
||
"criteria": "cpe:2.3:a:mcc:universal_library_for_linux_uldaq_:*:*:*:*:*:*:*:*",
|
||
"versionStartIncluding": "0",
|
||
"versionEndIncluding": "1.2.1"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.",
|
||
"supportingMedia": [
|
||
{
|
||
"type": "text/html",
|
||
"base64": false,
|
||
"value": "<p>There\nis stack-based buffer overflow vulnerability recently discovered in MCC Universal Library for Linux (uldaq). This may result in information disclosure or arbitrary code\nexecution. This vulnerability affects MCC Universal Library for Linux (uldaq) v1.2.1\nand prior versions.</p>"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/stack-based-buffer-overflow-vulnerability-linux-uldaq.html"
|
||
},
|
||
{
|
||
"url": "https://github.com/mccdaq/uldaq/security/advisories/GHSA-9jr3-33mw-g6jc"
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
],
|
||
"cvssV3_1": {
|
||
"version": "3.1",
|
||
"attackVector": "LOCAL",
|
||
"attackComplexity": "LOW",
|
||
"privilegesRequired": "NONE",
|
||
"userInteraction": "REQUIRED",
|
||
"scope": "UNCHANGED",
|
||
"confidentialityImpact": "HIGH",
|
||
"integrityImpact": "HIGH",
|
||
"availabilityImpact": "HIGH",
|
||
"baseSeverity": "HIGH",
|
||
"baseScore": 7.8,
|
||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
|
||
}
|
||
},
|
||
{
|
||
"format": "CVSS",
|
||
"scenarios": [
|
||
{
|
||
"lang": "en",
|
||
"value": "GENERAL"
|
||
}
|
||
],
|
||
"cvssV4_0": {
|
||
"attackVector": "LOCAL",
|
||
"attackComplexity": "LOW",
|
||
"attackRequirements": "NONE",
|
||
"privilegesRequired": "NONE",
|
||
"userInteraction": "NONE",
|
||
"vulnConfidentialityImpact": "HIGH",
|
||
"subConfidentialityImpact": "NONE",
|
||
"vulnIntegrityImpact": "HIGH",
|
||
"subIntegrityImpact": "NONE",
|
||
"vulnAvailabilityImpact": "HIGH",
|
||
"subAvailabilityImpact": "NONE",
|
||
"exploitMaturity": "NOT_DEFINED",
|
||
"Safety": "NOT_DEFINED",
|
||
"Automatable": "NOT_DEFINED",
|
||
"Recovery": "NOT_DEFINED",
|
||
"valueDensity": "NOT_DEFINED",
|
||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||
"providerUrgency": "NOT_DEFINED",
|
||
"version": "4.0",
|
||
"baseSeverity": "HIGH",
|
||
"baseScore": 8.6,
|
||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
|
||
}
|
||
}
|
||
],
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Tsurumi Junichi of Panasonic Holdings Corporation",
|
||
"type": "finder"
|
||
}
|
||
],
|
||
"source": {
|
||
"discovery": "UNKNOWN"
|
||
},
|
||
"x_generator": {
|
||
"engine": "Vulnogram 1.0.5"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-09-17T20:04:00.493759Z",
|
||
"id": "CVE-2026-19477",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-09-17T20:05:52.443Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |