libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

CVE-2026-19617

CVE-2026-19617 affects libdm (LVM2). A remote attacker can craft a deeply nested LVM metadata configuration that triggers uncontrolled recursion in the libdm configuration parser, exhausting the stack and causing DoS for any LVM command reading the metadata. Documented impact is Denial of Service...

CVE-2026-19617 Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager LVM metadata configuration with deeply nested structures. This could lead to uncontrolled recursion in the libdm configuration file parser, exhausting the stack and causing any LVM command reading the...

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan RAT as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of the packages ...

Malicious code in local-config-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa2dd509a9d17ced72d7119cf68768f7356d3f67af131e9cbe5bfe981a626ac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-11167 Malicious code in local-config-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa2dd509a9d17ced72d7119cf68768f7356d3f67af131e9cbe5bfe981a626ac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview local-config-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

ImpactVulnerability Type: CRLF Injection via ConfigParserAn attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior.Affected Users: Users...

PYSEC-2026-1260 ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

Impact Vulnerability Type: CRLF Injection via ConfigParser An attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. Affected Users: Users...

PT-2026-64268

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523820519 Crash type: Heap-buffer-overflow READ 1 Crash state: ssh config parse line internal ssh config parse string ssh client config fuzzer.c...

Open5GS 安全漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain security vulnerabilities. These vulnerabilities stem from a denial-of-service attack in the shared NF configuration file...

UBUNTU-CVE-2025-59391

A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing certain configuration values, allowing an attacker to infer or read memory beyond string boundaries in the .rodata section. This...

PT-2025-49575

Name of the Vulnerable Software and Affected Versions libcoap versions prior to 4.3.5-patches Description A memory disclosure issue exists in libcoap's OSCORE configuration parser. An out-of-bounds read can occur when parsing specific configuration values, potentially allowing an attacker to infe...

Debian dla-4363 : dcmtk - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4363 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4363-1 [email protected]...

haproxy:fuzz_cfg_parser: Segv on unknown address in sanitize_for_printing

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=6200407397564416 Project: haproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcfgparser Job Type: libfuzzerasanhaproxy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash Stat...

haproxy:fuzz_cfg_parser: Stack-buffer-overflow in parse_line

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4807914173038592 Project: haproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzcfgparser Job Type: honggfuzzasanhaproxy Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...

haproxy:fuzz_cfg_parser: Heap-buffer-overflow in fgets_from_mem

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=5842906806550528 Project: haproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcfgparser Job Type: libfuzzerasanhaproxy Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

SUSE CVE-2014-3638

The busconnectionscheckreply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service CPU consumption via a large number of method calls...

fluent-bit:flb-it-fuzz-config_random_fuzzer_OSSFUZZ: Heap-double-free in read_config

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=5285491714424832 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-configrandomfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free...