11615 matches found
ECHO-F759-D499-AD5C DoS (bandwidth consumption) via a Range header specifying multiple copies of the same fragment over a TCP connection with a large window size. The severity is explicitly disputed by third parties (NVD carries the "disputed" tag) because the large TCP window size the attack relies on is not normally supported or configured by the server, and the same effect is achievable by simply downloading the file. Red Hat states it "does not consider this issue to be a security vulnerability". Debian classifies it as an unimportant issue. No code change required in the shipped 2.4.68 build. https://security-tracker.debian.org/tracker/CVE-2007-0086
Bulletin has no description...
ECHO-70E5-DF73-C55E
Bulletin has no description...
DEBIAN-CVE-2026-46221
In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzalloc in initonemc is assigned to dev-initname but never freed on the normal removal path. deviceregister copies initname and then sets dev-initname to...
DEBIAN-CVE-2026-46185
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlinkdata Since smb2checkmessage returns success without length validation for the symlink error response, in symlinkdata it is possible for iov-iovlen to be smaller than sizeofstruct...
DEBIAN-CVE-2026-46180
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between sendsig and kthreadstop calls, what results in the use-after-free issue. Fix this by increasing watchdog task referenc...
DEBIAN-CVE-2026-46177
In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages until the BMC said it was done. To avoid issues with BMCs that never say they are done, add a limit of 10 fetches at a...
DEBIAN-CVE-2026-46150
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotifygetmarksafe may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the...
DEBIAN-CVE-2026-46124
In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofsexportiget isofsfhtodentry and isofsfhtoparent pass an attacker- controlled block number ifid-block or ifid-parentblock from the NFS file handle to isofsexportiget, which...
DEBIAN-CVE-2026-46119
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...
RHSA-2026:21699 Red Hat Security Advisory: xorg-x11-server security update
Bulletin has no description...
RHSA-2026:21516 Red Hat Security Advisory: cockpit security update
Bulletin has no description...
RHSA-2026:21515 Red Hat Security Advisory: cockpit security update
Bulletin has no description...
RHSA-2026:21433 Red Hat Security Advisory: httpd security update
Bulletin has no description...
RHSA-2026:21394 Red Hat Security Advisory: cockpit security update
Bulletin has no description...
RHSA-2026:21381 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
RHSA-2026:21380 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:21296 Red Hat Security Advisory: .NET 9.0 security update
Bulletin has no description...
MINI-JFP6-XCHV-MP6V
Bulletin has no description...