5840 matches found
ECHO-CAA3-AC17-075F
Bulletin has no description...
kernel: sctp: purge outqueue on stale COOKIE-ECHO handling
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...
ECHO-B5FE-8A22-4E2A
Bulletin has no description...
ECHO-66D7-E273-5F0F
Bulletin has no description...
ECHO-AA38-89D5-F024
Bulletin has no description...
ALSA-2026:59737 Important: kernel-rt security, bug fix, and enhancement update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64...
mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)
Summary mediasoup's built-in SCTP stack introduced in v3.20.0 authenticates SCTP state cookies using only hardcoded magic byte sequences rather than a per-instance HMAC keyed with a secret, violating RFC 9260 Section 5.1.3. An on-path attacker targeting a PlainTransport with SCTP enabled and no...
GHSA-VFP3-V2GW-7WFQ Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files
Summary Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls...
EUVD-2026-39800
Echo: Encoded slash %2F bypasses route-level protection and exposes static files...
Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files
Summary Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls...
SUSE SLES12 Security Update : kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3706-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3706-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues: The following security issues were fixed: -...
ECHO-B159-47C9-E4C0
Bulletin has no description...
ECHO-F527-DF54-BB49
Bulletin has no description...
ECHO-25A6-FC70-1477
Bulletin has no description...
ECHO-4020-D607-EA47
Bulletin has no description...
ECHO-0FFE-8D46-73CA
Bulletin has no description...
ECHO-F83A-F1A3-51C1 The CVE has been rejected by the assigning CNA (Red Hat, CVSS 0.0): per upstream security policy binutils treats its input as trusted, so no security boundary is crossed. No fix exists upstream or in any Debian suite.
Bulletin has no description...
ECHO-929C-25C5-F964
Bulletin has no description...