55 matches found
kekeo
kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...
CLEANSTART-2026-LU31702 In Eclipse Jetty, the HTTP/1
Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the HTTP/1...
CLEANSTART-2026-NQ17832 Undici is an HTTP/1
Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...
CLEANSTART-2026-AU79702 Undici is an HTTP/1
Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...
CLEANSTART-2026-TM79261 Undici is an HTTP/1
Security vulnerability affects the nodejs-24 package. Undici is an HTTP/1...
CLEANSTART-2026-QW98383 Undici is an HTTP/1
Security vulnerability affects the openjdk21 package. Undici is an HTTP/1...
CLEANSTART-2026-AE51081 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the apache-nifi package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
CLEANSTART-2024-HW06037 issue was discovered in MIT Kerberos 5 (aka krb5) through 1
Security vulnerability affects the krb5 package. An issue was discovered in MIT Kerberos 5 aka krb5 through 1...
CLEANSTART-2026-PR17240 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the apache-nifi package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
CLEANSTART-2026-DD22310 During the TLS 1
Security vulnerability affects the coredns package. During the TLS 1...
CLEANSTART-2024-JE78408 issue was discovered in the DNS proxy in Connman through 1
Security vulnerability affects the connman package. An issue was discovered in the DNS proxy in Connman through 1...
CLEANSTART-2024-TX08418 issue was discovered in the DNS proxy in Connman through 1
Security vulnerability affects the connman package. An issue was discovered in the DNS proxy in Connman through 1...
CLEANSTART-2026-QY36065 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
CLEANSTART-2026-ZI25974 In Eclipse Jetty, the HTTP/1
Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...
AZL-92430 CVE-2026-59885 affecting package python-pyasn1 for versions less than 0.4.8-3
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...
PT-2026-63455
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with C...
pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service DoS f...
TencentOS Server 4: python-pyasn1 (TSSA-2026:0038)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0038 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
