Lucene search
+L

184357 matches found

RedHat Linux
RedHat Linux
added 2026/09/17 7:12 a.m.10 views

kernel: ipv6: prevent possible UaF in addrconf_permanent_addr()

A flaw was found in the Linux kernel's IPv6 networking subsystem. Specifically, a Use-after-Free UaF vulnerability exists within the addrconfpermanentaddr function. This issue arises when the system attempts to access an IPv6 address after it has been freed, which could allow an attacker to cause...

7.8CVSS0.00121EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/17 7:12 a.m.5 views

kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN

A flaw was found in the Linux kernel's Internet Small Computer System Interface iSCSI Extensions for Remote Direct Memory Access RDMA iSER module. A remote attacker can send a specially crafted login request with a payload shorter than expected, leading to an integer underflow. This underflow...

9.8CVSS0.00761EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/17 7:12 a.m.10 views

kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

A flaw was found in the Linux kernel's handling of RAW sockets using IPPROTORAW. A remote attacker could send a specially crafted ICMP Internet Control Message Protocol packet. This malicious packet could set the protocol field to 255, causing it to be processed by a RAW socket configured for...

9.1CVSS0.00371EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/17 7:12 a.m.11 views

kernel: xfrm: hold dev ref until after transport_finish NF_HOOK

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

7.8CVSS0.00133EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/17 7:11 a.m.9 views

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

7.8CVSS0.00182EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/17 7:10 a.m.7 views

github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env

A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...

7.8CVSS0.00176EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/17 7:10 a.m.7 views

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

7.5CVSS0.00728EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:10 a.m.7 views

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

7.5CVSS0.00651EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/17 7:10 a.m.7 views

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

10CVSS0.00778EPSS
SaveExploits1References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:10 a.m.8 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

7.5CVSS0.00615EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.7 views

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

7.5CVSS0.00784EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.8 views

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending oversized or invalid baggage headers. The Parse function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when...

5.3CVSS0.00336EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.6 views

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

7.5CVSS0.00798EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.7 views

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

7.5CVSS0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.7 views

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

7.5CVSS0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.9 views

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

7.5CVSS0.0056EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 7:06 a.m.8 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 5:05 a.m.9 views

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

6.5CVSS0.00298EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/17 5:05 a.m.9 views

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

7.5CVSS0.00615EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2026/09/17 5:05 a.m.8 views

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

9.6CVSS0.00692EPSS
SaveExploits0References8
Rows per page
Query Builder