Plan9port
Monthly
Local denial of service in 9fans plan9port via a null pointer dereference in the X.509 certificate parsing function value_decode. A local attacker with low privileges can crash applications using the libsec port, disrupting availability. Public exploit code is available, but EPSS indicates low exploitation likelihood and no active exploitation has been reported via CISA KEV.
Heap-based buffer overflow in plan9port's x509 certificate parsing library allows adjacent network attackers with low privileges to potentially execute arbitrary code or crash the service. Exploit code is publicly available, but no active exploitation has been confirmed (not listed in CISA KEV).
Local denial of service in 9fans plan9port via a null pointer dereference in the X.509 certificate parsing function value_decode. A local attacker with low privileges can crash applications using the libsec port, disrupting availability. Public exploit code is available, but EPSS indicates low exploitation likelihood and no active exploitation has been reported via CISA KEV.
Heap-based buffer overflow in plan9port's x509 certificate parsing library allows adjacent network attackers with low privileges to potentially execute arbitrary code or crash the service. Exploit code is publicly available, but no active exploitation has been confirmed (not listed in CISA KEV).