CVE-2023-25136

OpenSSH CVE-2023-25136 预认证双重释放 – 分析报告与概念验证 什么是 OpenSSH？ OpenSSH 是一种用于安全通信和远程访问的流行工具。它是作为安全外壳 SSH 通信协议的一个免费开源实现而开发的，并广泛应用于各种场景。 OpenSSH 在不安全的网络上的两个不可信主机之间提供安全且加密的连接，使其成为远程访问和安全文件传输的基本工具。 随着云计算和远程服务器访问的日益普及，OpenSSH 已成为系统管理员和开发人员安全访问和管理远程系统的关键工具。 OpenSSH 还支持广泛的操作系统，包括 Linux、macOS 和...

CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC 模拟的Lindell17协议存在比特提取漏洞，攻击者可通过迭代提取密钥的各个比特来恢复私钥。该协议旨在通过客户端-服务器模型生成ECDSA签名，其中每一方持有ECDSA密钥的份额。漏洞在于对签名尝试过程中中止处理的错误处理，使得攻击者能够在多次迭代中提取密钥的比特。...

CVE-2026-0049

CVE-2026-0049 — Android DNG 零点击拒绝服务（dngsdk MapTable 加法溢出） 完整的研究与 PoC 材料。叙述性分析： 🇮🇹BLOG.md · 🇬🇧BLOG.en.md。 Bug ：dngopcodeMapTable::ProcessArea（dngsdk/source/dngmiscopcodes.cpp:388）中 fAreaSpec.Plane + fAreaSpec.Planes 的无符号整数溢出。 影响 ：零点击 DoS。Android 编译 libdngsdk.so 时使用的 IntSan 会将溢出转化为 abort → 在解码 DNG...

CVE-2024-27804

CVE-2024-27804 root@kitploit: ./build.sh ./panic.sh root@kitploit: paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3:...

CVE-2026-84450

libheif versions 1.19.0 through 1.23.3 are affected by a crafted-image vulnerability in the tiling API. A HEIF/AVIF image containing a clap property with an ispe width or height exceeding INT32_MAX + 1 triggers crop calculations via heif_image_handle_get_image_tiling(). The Fraction::Fraction() u...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

安全通告：rouille 中 URL 前缀处理的可达断言导致远程拒绝服务 分配的 CVE 编号： CVE-2026-66754 摘要 Request::removeprefix 检查的是百分号解码后的 URL，但断言的是原始 URL。如果一个请求的解码后路径以该前缀开头，但其原始路径并非如此，那么该请求会通过检查，却在断言处失败。只需对前缀中的一个字符进行百分号编码即可。 在默认构建下，panic 会被捕获并变成 500 响应。在启用 panic = "abort" 的构建中，没有任何机制可以捕获它，一次未认证的 GET 请求就会终止服务器进程。 受影响版本 仓库...

jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 Prueba de Concepto Resumen Esta es una Prueba de Concepto de DoS de la vulnerabilidad de doble liberación double-free en OpenSSH 9.1p1 CVE-2023-25136. Desencadenará la doble liberación y provocará un bloqueo por aborto. Para una comprensión completa, consulte la publicación del blo...

CVE-2026-8674

A assertion failure in the DNS stub resolver of the GNU C Library (glibc) versions 2.26 through 2.44 aborts any process that resolves names through the library. The root cause is that when the search list in /etc/resolv.conf or the LOCALDOMAIN environment variable contains a domain of roughly 200...

CVE-2026-8674 Assertion failure in the DNS stub resolver with a long search domain

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-90261 btrfs: zoned: flush active metadata block group at btree_writepages() start

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block group at btreewritepages start btreewritepages writes the btree inode's dirty metadata in ascending logical address order. On a zoned filesystem only one metadata and one system block gro...

CVE-2026-77692

An attacker can cause named to abort by sending a crafted DNS-over-H...

UBUNTU-CVE-2026-77692

An attacker can cause named to abort by sending a crafted DNS-over-H...

CVE-2026-19662

An attacker may be able to cause a named resolver to abort. The atta...

UBUNTU-CVE-2026-19662

An attacker may be able to cause a named resolver to abort. The atta...

CVE-2026-77692

An attacker can cause named to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG0 record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1...

CVE-2026-19662

An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, a...

EUVD-2026-80742

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 throug...

CVE-2026-91961

GHSA-w9qg-g24r-77f6: URBDRC/libusb control-transfer path aborts on reachable OutputBufferSize assertion...

UBUNTU-CVE-2026-91961

GHSA-w9qg-g24r-77f6: URBDRC/libusb control-transfer path aborts on reachable OutputBufferSize assertion...

Linux Distros Unpatched Vulnerability : CVE-2026-19662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker may be able to cause a named resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone...