32473 matches found
nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service...
nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service...
nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service...
Python 安全漏洞
Python is an open-source, object-oriented programming language developed by the Python Foundation. This language features extensibility, support for modules and packages, and compatibility with multiple platforms. Python has security vulnerabilities; one of these vulnerabilities arises from reusi...
The vulnerability of the Transport Layer Security library GnuTLS, related to its algorithmic complexity, allows attackers to induce a service failure.
The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the g_assert_not_reached() function in the Lasso library, which allows a violator to trigger a service failure
The vulnerability of the gassertnotreached function in the Lasso library is related to an uncontrolled reachable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a service failure by sending specially crafted SAML packets...
The vulnerability of the g_unichar_to_utf8() function in the GLib library allows a attacker to cause a service failure.
The vulnerability of the gunichartoutf8 function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the parse_header() function in the GLib library allows a hacker to cause a service failure.
The vulnerability of the parseheader function in the GLib library is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability allows an attacker to trigger a service failure...
The vulnerability of the bytestring_parse() and string_parse() functions within the GLib library allows a hacker to cause a service failure.
The vulnerability of the bytestringparse and stringparse functions in the GLib library set is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the sigd_send() function in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the sigdsend function in Linux operating system kernels is related to unreliable pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-31426
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: EC: clean up handlers on probe failure in acpiecsetup When ecinstallhandlers returns -EPROBEDEFER on reduced-hardware platforms, it has already started th...
nghttp2 security update
1.33.0-6.2 - fix Denial of service: Assertion failure due to the missing state validation CVE-2026-27135...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the acpiecsetup function not properly cleaning up the handler when detection fails, potentially...
PT-2026-32352
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ACPI EC component. When the ec install handlers function returns a -EPROBE DEFER error on reduced-hardware platforms, the acpi ec setup function fail...
The vulnerability of the UltraJSON programming language package in Python, related to integer overflow, allows attackers to trigger a service failure.
The vulnerability of the UltraJSON programming language package in Python is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the Python programming language-based UltraJSON package lies in the lack of memory release after the effective lifespan, which allows a malicious actor to trigger a service failure.
The vulnerability of the Python programming language-based UltraJSON package is related to the lack of memory release after the effective lifespan of the package. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the g_buffered_input_stream_peek() function within the GLib library allows a hacker to cause a service failure.
The vulnerability of the gbufferedinputstreampeek function in the GLib library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the OpenEMR system for managing medical documents, related to the failure to take measures to neutralize certain elements, allows a perpetrator to execute arbitrary commands.
The vulnerability of the OpenEMR system for medical documentation lies in the lack of measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
Amazon Linux 2023 : libnghttp2, libnghttp2-devel, nghttp2 (ALAS2023-2026-1542)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1542 advisory. nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API...