8614 matches found
Excessive Memory Allocation in Relative CRLDP Processing
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...
CVE-2026-35189: Allocation of Resources Without Limits or Throttling
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...
Linux Distros Unpatched Vulnerability : CVE-2026-35189
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions...
distribution-registry-3.1.1-8.1 on GA media (moderate)
distribution-registry-3.1.1-8.1 on GA media Announcement ID: openSUSE-SU-2026:11872-1 Rating: moderate Cross-References: CVE-2026-81871 CVE-2026-81872 CVSS scores: CVE-2026-81871 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-81872 SUSE : 5.3...
ROS-20260928-73-0125
The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the MinIO object storage server, related to the unlimited distribution of resources, allows a attacker to cause a service failure.
The vulnerability of the MinIO object storage server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the `SslClientHelloHandler.decode()` function in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to induce a service failure.
The vulnerability of the SslClientHelloHandler.decode function in the framework for developing network applications, servers, and clients using the Netty protocol is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the framework for developing network applications, servers, and client protocols related to Netty, arises from the unlimited distribution of resources, allowing attackers to cause service failures.
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Application Agnostic EM Side-Channel Emanations of the FPGA Clock Distribution Network
Electromagnetic side channels have been extensively utilized in non-invasive attacks or analyses to extract critical information from deployed systems. Most of the attacks or analyses are typically executed on cryptographic algorithms under the assumption that the underlying implementation remain...
Information Blackhole: Exploring Backdoor Mechanism in 3D Point Cloud Reconstruction
Point cloud autoencoders are fundamental components for 3D world representation and support many safety-critical downstream applications. Existing studies have extensively investigated backdoor attacks on point cloud classification, whereas backdoor attacks against point cloud autoencoders remain...
ROS-20260925-73-0190
The vulnerability of the ext4xattrmovetoblock function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service...
The vulnerability of the IAMF demultiplexer in the FFmpeg multimedia library allows a hacker to cause a service failure.
The vulnerability of the IAMF demultiplexer in the FFmpeg multimedia library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the libssh library, related to unlimited resource distribution, allows a hacker to cause a service failure.
The vulnerability of the libssh library is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of the Perl-DBI interface for connecting to and working with databases, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the Perl-DBI interface for connecting to and working with databases involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the asynchronous Python-daphne web server, related to unlimited resource distribution, allows attackers to cause service failures.
The vulnerability of the asynchronous Python-daphne web server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Entity Analytics component of the Kibana data visualization service allows a perpetrator to trigger a service failure.
The vulnerability of the Entity Analytics component of the Kibana data visualization service is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely, allowing a hacker to cause service failures.
The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Fedora 46 : docker-distribution (2026-a5209e3552)
The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a5209e3552 advisory. Automatic update for docker-distribution-3.1.2-1.fc46. Changelog Thu Sep 24 2026 Bradley G Smith - 3.1.2-1 - Update to release v3.1.2 - Resolves:...
ROS-20260924-73-0087
The vulnerability of the BPFCALL2 function in the net/core/filter.c module related to Linux’s kernel network functions involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
