35493 matches found
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
net/mail: golang: net/mail: Denial of Service via pathological email address parsing
A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
dncil
dncil is a Common Intermediate Language CIL disassembly library written in Python that supports parsing the header, instructions, and exception handlers of .NET managed methods. Parsed data is exposed through an object-oriented API to help you quickly develop CIL analysis tools using dncil. Why...
dns-benchmark-tool
⚠️ este proyecto se ha trasladado y ya no se mantiene. instala el sucesor: pip install net-benchmark repositorio: https://github.com/net-benchmark/net-benchmark todos los comandos y opciones existentes siguen siendo completamente compatibles. DNS Benchmark Tool Parte de BuildTools - Network...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ruby (UTSA-2026-106187)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106187 advisory. Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string...
The vulnerability of the decode_choose_args() function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.
The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is responsible for implementing networking functions of the Linux kernel, is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the psp_assoc_device_get_locked() function in the net/psp/psp_nl.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.
The vulnerability of the pspassocdevicegetlocked function in the net/psp/pspnl.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the crush_decode() function in the net/ceph/osdmap.c kernel of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the unix_stream_bpf_update_proto() function in the net/unix/unix_bpf.c module, which implements networking functions in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the unixstreambpfupdateproto function in the net/unix/unixbpf.c module, which implements networking functions in the Linux operating system’s kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...
RHEL 7 : kernel (RHSA-2026:63538)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:63538 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: stop fast-leave after...
Linux Distros Unpatched Vulnerability : CVE-2026-80849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/tcp-ao: fix use-after-free of currentkey on reconnect to another peer tcpinboundaohash is called before bhlocksocknested is taken, with only rcureadlock hel...
The vulnerability of the sock_ops_convert_ctx_access() function in the net/core/filter.c module allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information within Linux’s kernel-based networking functions.
The vulnerability of the sockopsconvertctxaccess function in the net/core/filter.c module relates to the execution of operations outside of buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the __ceph_x_decrypt() function in the net/ceph/auth_x.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the cephxdecrypt function in the net/ceph/authx.c module, which is part of the networking functions in the Linux kernel, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service...
Linux Distros Unpatched Vulnerability : CVE-2026-80906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called ...
Unbreakable Enterprise kernel security update
6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...