CVE-2026-14461Patch

LOWCVSS 5.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker who can influence the TXT response used for AS lookups can trigger this bug by returning a DNS response that is larger than 512 bytes and uses a crafted compression pointer in the answer NAME field. ipinfo_lookup() function uses the length of the response as the end-of-message boundary for dn_expand() function. The result is a reliable crash. This issue exists in the mtr through version 0.96 and it was fixed in commit 48e1794414d338ce47abc0f27c25ade8788af9c3.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://vulnipulse.com/advisories/linux-cve-2026-14461

Full discourse1 post

VulniPulse@vulnipulse92d
Patch
⚠️ Red Hat Enterprise Linux 10 alert: CVE-2026-14461 (CVSS 6.5) Attackers could disrupt service or cause a denial of service. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-14461 #Linux #RedHatEnterpriseLinux10 #CyberSecurity #CVE
Post summary
This advisory alerts users to a CVE‑2026‑14461 denial‑of‑service flaw in Red Hat Enterprise Linux 10 (CVSS 6.5) and recommends upgrading to the vendor‑supplied fixed release.
0000034
6 followersView on X

Explore more

Back to dashboard