13 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-112046
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods...
CVE-2026-112046
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
DEBIAN-CVE-2026-112046
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
CVE-2026-112046 OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve()
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
CVE-2026-112046
The OW2 ASM library, specifically versions 9.11 before 9.11.1 , is vulnerable to a Denial of Service (DoS) condition. The root cause is an infinite loop within the Label.resolve() method, occurring because 16-bit forward-reference offsets truncate when rewritten methods exceed 64 KB. An attacker ...
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop via Label.resolve in the Label class. An attacker can hang ClassReader.accept by supplying a crafted class file whose transformed method grows beyond 65,535 bytes, denying service to build tools, instrumenters, agents, or...
CVE-2026-112046
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
EUVD-2026-103508
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
CVE-2026-112046 OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve()
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
CVE-2026-112046 OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve()
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
CVE-2026-112046: Loop with Unreachable Exit Condition
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
PT-2026-116629
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
OW2 ASM Resource Management Vulnerability
In OW2 and ASM versions prior to 9.11.1, there was a resource management error vulnerability. This vulnerability stemmed from a 16-bit forward reference offset in Label.resolve, which was truncated when the rewrite method exceeded 64 KB. This could lead to infinite loops. An attacker could provid...