IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-01-02 16:17

MODIFIED

2026-01-02 16:45

EPSS (Prob. Exploit)

0.56%

Top 53.0%

DATA SOURCES:

NVD 🔗 2026-01-02 RED HAT 🔗 2026-01-04 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`. When parsing a NAVCOM packet, the payload length is calculated using `lexer->length = (size_t)c - 4` without checking if the input byte `c` is less than 4. This results in an unsigned integer underflow, setting `lexer->length` to a very large value (near `SIZE_MAX`). The parser then enters a loop attempting to consume this massive number of bytes, causing 100% CPU utilization and a Denial of Service (DoS) condition.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

RHSA-2026:0771 IMPORTANT

Red Hat Security Advisory: gpsd-minimal security update

An update for gpsd-minimal is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Sys...

RHSA-2026:0770 IMPORTANT

Red Hat Security Advisory: gpsd security update

An update for gpsd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CV...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Important

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:

Unknown / Unknown

85 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

02/01/2026 16:17

Source: NVD

📊 ENRICHISSEMENT 19/01/2026 17:38

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui

📊 ENRICHISSEMENT 04/01/2026 04:01

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 23:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 22:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 21:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 20:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 19:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 18:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 17:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 16:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 15:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 14:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 13:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 12:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 11:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 10:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 09:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 08:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 07:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 06:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 05:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 04:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 03:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 02:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 01:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

{ "severity_scale": null, "threat_severity": "Important" }

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 00:30

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur:

N/A

Nouvelle valeur:

{ "threat_severity": "Important", "severity_scale": null }

📊 ENRICHISSEMENT 03/01/2026 00:30

REDHAT

Champ modifié: Red Hat

Ancienne valeur:

Non

Nouvelle valeur:

Oui

Total des modifications: 27 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/Jaenact/gspd_cve/blob/main/CVE-2025-67269/README.md

https://gitlab.com/gpsd/gpsd

https://gitlab.com/gpsd/gpsd/-/commit/ffa1d6f40bca0b035fc7f5e563160ebb67199da7

« BACK_TO_HOME

> CVE-2025-67269

> DESCRIPTION

> AFFECTED_PRODUCTS

> RED HAT SECURITY ADVISORIES

> RED HAT SEVERITY ASSESSMENT

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

> HISTORIQUE DES MODIFICATIONS

> REFERENCES