Stack Buffer Overflow in Sentinel Keys Server

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Stack-based buffer overflow and out-of-bounds
write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow
Buffers. 

Sentinel Keys Server does not check the length of the first field in
the input message. A local attacker may craft an input and send it to Sentinel
Keys Server. It may lead to code execution as NT AUTHORITY\SYSTEM enabling
local privilege escalation.

This issue affects Sentinel Keys Server: versions
lower than 1.3.8.0.

Üreticinin çözüm notu (İngilizce)

Upgrade latest version.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• supportportal.thalesgroup.com/csm Üretici bülteni

Kayıt geçmişi

1. 30 Eki 2026 22:11Yayımlandı

İlgili açıklar

• 9,8 CVE-2026-78403Unauthenticated Stack Buffer Overflow in Sentinel Keys Server
• 7,8 CVE-2026-119777Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser
• 6,5 CVE-2026-119086Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel
• 7,8 CVE-2026-104067Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin
• 7,8 CVE-2026-104065Scribus before 1.6.7 Heap Out-of-Bounds Write via Micrografx Draw Import
• 7,8 CVE-2026-104066Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking