Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
Victoria Metrics and Node Problem Detector risk buffer overflow
published 10 days ago
Summary
The Victoria Metrics and Node Problem Detector components can write more data than expected into a memory area, which may cause the program to crash or be taken over by an attacker. This happens because the function that creates a text string does not verify how long the string is. Update to the latest versions of these packages or apply the provided patches to fix the issue.
What to do
- Update cleanstart victoria-metrics to version 1.144.0-r0.
- Update cleanstart node-problem-detector to version 0.8.25-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | victoria-metrics |
< 1.144.0-r0 Fix: upgrade to 1.144.0-r0
|
| CleanStart | cleanstart | node-problem-detector |
< 0.8.25-r1 Fix: upgrade to 0.8.25-r1
|
Original advisory text
NewNTUnicodeString does not check for string length overflow
CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published9 Oct 2026
Updated9 Oct 2026
First seen9 Oct 2026
Sources
CLEANSTART-2026-SV16183 · OSV
Track software like this
Free during beta