CVE-2026-6843— Nano: nano: format string vulnerability leads to denial of service
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-6843
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nano: nano: format string vulnerability leads to denial of service
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the `nano` application.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用外部控制的格式字符串
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat Enterprise Linux 格式化字符串错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat Enterprise Linux是美国红帽（Red Hat）公司的面向企业用户的Linux操作系统。 Red Hat Enterprise Linux 10存在格式化字符串错误漏洞，该漏洞源于statusline函数存在格式字符串漏洞，本地用户可通过创建包含printf说明符的目录名，导致应用程序尝试显示该名称时发生分段错误，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | cpe:/o:redhat:enterprise_linux:10 | |
| Red Hat | Red Hat Enterprise Linux 6 | - | cpe:/o:redhat:enterprise_linux:6 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 | |
| Red Hat | Red Hat Enterprise Linux 8 | - | cpe:/o:redhat:enterprise_linux:8 | |
| Red Hat | Red Hat Enterprise Linux 9 | - | cpe:/o:redhat:enterprise_linux:9 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | - | cpe:/a:redhat:openshift:4 |
II. Public POCs for CVE-2026-6843
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-6843
请登录查看更多情报信息。
Same Patch Batch · Red Hat · 2026-04-22 · 11 CVEs total
| CVE-2026-6859 | 8.8 HIGH | Instructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=tru |
| CVE-2026-6846 | 7.8 HIGH | Binutils: binutils: arbitrary code execution via malformed xcoff object file processing |
| CVE-2026-6857 | 7.5 HIGH | Camel-infinispan: camel-infinispan: remote code execution via unsafe deserialization |
| CVE-2026-6855 | 7.1 HIGH | Instructlab: instructlab: path traversal allows arbitrary directory creation and file writ |
| CVE-2026-6861 | 6.1 MEDIUM | Emacs: emacs: memory corruption vulnerability when processing svg css |
| CVE-2026-6862 | 5.5 MEDIUM | Efivar: efivar: denial of service due to stack overflow in device path node parsing |
| CVE-2026-6844 | 5.5 MEDIUM | Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files |
| CVE-2026-6848 | 5.4 MEDIUM | Quay: red hat quay: authentication bypass allows privileged actions without valid credenti |
| CVE-2026-6845 | 5.0 MEDIUM | Binutils: binutils: denial of service via crafted elf file |
| CVE-2026-6842 | 2.5 LOW | Nano: nano: local attacker can inject malicious .desktop launcher due to insecure director |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
- CVE-2026-42011
Gnutls: gnutls: security bypass due to incorrect name constr - CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in u - CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2026-34002
Xorg: xwayland: x.org x server: information disclosure or de - CVE-2026-34000
Xwayland: xorg: x.org x server: information disclosure and d
Same vendor: Red Hat
- CVE-2026-42011
Gnutls: gnutls: security bypass due to incorrect name constr - CVE-2026-42010
Gnutls: gnutls: authentication bypass via nul character in u - CVE-2026-6420
Keylime: keylime: security bypass due to hardcoded tpm quote - CVE-2026-34956
Openvswitch: open vswitch: denial of service via malformed f - CVE-2026-34002
Xorg: xwayland: x.org x server: information disclosure or de
Same weakness: CWE-134
- CVE-2026-44407
Remote Denial of Service Vulnerability Exists in ZTE Cloud P - CVE-2026-6539
Notepad++ 8.9.3 Format String Injection via nativeLang.xml - CVE-2026-3509
CODESYS Control Audit Log Format String DoS - CVE-2026-33210
Ruby JSON has a format string injection vulnerability - CVE-2025-68648
Fortinet多款产品 格式化字符串错误漏洞
V. Comments for CVE-2026-6843
No comments yet