CVE-2026-5435
ADVISORY - nistSummary
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.
EPSS Score: 0.00037 (0.109)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Out-of-bounds Write
ADVISORY - redhat
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-5435
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
7.3highDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-5435
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-5435
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-5435
EXPLOITABILITY SCORE
1.6
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)