552 matches found
Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability
Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift Python bindings.This issue affects Apache Thrift: before 0.24.0.Users are recommended to upgrade to version 0.24.0, which fixes the issue...
CVE-2026-46387: Improper Handling of Highly Compressed Data (Data Amplification)
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA...
EUVD-2026-73741
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability...
Improper Handling of Highly Compressed Data (Data Amplification)
Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the request decompression process. An attacker can cause excessive memory consumption by sending highly compressed requests, potentially leading to service disruption...
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...
GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...
CVE-2026-79695
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-79695
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
EUVD-2026-74849
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-79695
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-79695
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application are affected by an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated attacker with remote netw...
CVE-2026-79695: Improper Handling of Highly Compressed Data (Data Amplification)
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data Data Amplification vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,...
PT-2026-88942
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description Improper handling of highly compressed data, known as data amplification, allows an unauthenticated remote attacker to cause ...
Linux Distros Unpatched Vulnerability : CVE-2026-69304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-69304 No...
Data Amplification
Overview httpx2 is a The next generation HTTP client. Affected versions of this package are vulnerable to Data Amplification in the default transport's response decompression, which inflates each network read of up to 64 KiB completely into a single intermediate allocation before yielding any...
GHSA-V3F6-M9J2-437P Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. Original Description Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to den...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. Original Description Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to den...
CVE-2026-69304
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...