Lucene search
K

11096 matches found

Cvelist
Cvelist
added 2026/02/18 2:53 p.m.22 views

CVE-2026-23220 ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

0.00118EPSS
Exploits0References7
OSV
OSV
added 2026/02/18 2:53 p.m.4 views

CVE-2026-23220 ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In processrequest, if checksignreq returns an error, setsmb2rspstatuswork...

5.5CVSS5.3AI score0.00118EPSS
Exploits0References9
Snyk
Snyk
added 2026/02/18 6:5 a.m.1 views

Infinite loop

Overview org.webjars.npm:jsrsasign is a free pure JavaScript cryptographic library. Affected versions of this package are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker ...

8.7CVSS5.9AI score0.004EPSS
Exploits1References2
Snyk
Snyk
added 2026/02/18 6:5 a.m.4 views

Infinite loop

Overview jsrsasign is a free pure JavaScript cryptographic library. Affected versions of this package are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the...

8.7CVSS5.8AI score0.004EPSS
Exploits1References2
OSV
OSV
added 2026/02/18 4:16 a.m.3 views

CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.4AI score
Exploits0References5
OSV
OSV
added 2026/02/18 4:16 a.m.1 views

AZL-78024 CVE-2026-27171 affecting package openjpeg2 2.3.1-12

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.7AI score0.00204EPSS
Exploits1References1
OSV
OSV
added 2026/02/18 4:16 a.m.2 views

AZL-77981 CVE-2026-27171 affecting package blosc 1.21.4-2

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.7AI score0.00204EPSS
Exploits1References1
OSV
OSV
added 2026/02/18 4:16 a.m.1 views

ALPINE-CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.8AI score0.00204EPSS
Exploits1References1
OSV
OSV
added 2026/02/18 4:16 a.m.6 views

DEBIAN-CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.2AI score0.00204EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/02/18 4:16 a.m.5 views

CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.8AI score0.00204EPSS
Exploits1References5
Snyk
Snyk
added 2026/02/18 3:52 a.m.2 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the crc32combinegen64 function. An attacker can cause excessive CPU consumption by providing negative argument that triggers a loop with no termination condition. Remediation Upgrade zlib to version 1.3.2 or higher...

5.5CVSS5.8AI score0.00204EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/02/18 2:36 a.m.2 views

CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

2.9CVSS5.4AI score0.00204EPSS
Exploits1References5
CVE
CVE
added 2026/02/18 2:36 a.m.320 views

CVE-2026-27171

CVE-2026-27171 affects zlib versions before 1.3.2. The issue arises from crc32_combine64/crc32_combine_gen64 where a loop in x2nmodp can run with no termination condition, causing an infinite loop and excessive CPU usage (DoS). Multiple connected advisories confirm the DoS impact and the fix in z...

5.5CVSS5.4AI score0.00204EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/18 12:0 a.m.3 views

PT-2026-21301

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.7.1 Description A crafted PDF file can cause an infinite loop when accessing the children of a TreeObject, such as during outline processing. This issue affects the pypdf library, a free and open-source pure-python PD...

6.9CVSS5.2AI score0.00168EPSS
Exploits0References38
Tenable Nessus
Tenable Nessus
added 2026/02/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-23220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix infinite loop caused by nextsmb2rcvhdroff reset in error paths The problem occurs when a signed request fails smb2 signature verification check. In...

5.5CVSS5.8AI score0.00118EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/16 7:30 p.m.7 views

CVE-2025-27560

Loop with unreachable exit condition 'infinite loop' for some IntelR Platform within Ring 0: Kernel may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local acces...

6.7CVSS5.4AI score0.00113EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/02/16 12:25 a.m.3 views

SUSE CVE-2026-23177

In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate race When truncating a large swap entry, shmemfreeswap returns 0 when the entry's index doesn't match the given index due to lookup alignment. The failure fallback path checks if the...

4.7CVSS5.3AI score0.00166EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/02/16 12:0 a.m.7 views

Debian dla-4479 : libwireshark-data - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4479 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4479-1 [email protected]...

7.8CVSS6.8AI score0.00306EPSS
Exploits5References18
Redos
Redos
added 2026/02/16 12:0 a.m.7 views

ROS-20260216-73-0048

Vulnerability in python-PyPDF2 related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.1CVSS5.8AI score0.00374EPSS
Exploits2
NVD
NVD
added 2026/02/14 5:15 p.m.5 views

CVE-2026-23177

In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate race When truncating a large swap entry, shmemfreeswap returns 0 when the entry's index doesn't match the given index due to lookup alignment. The failure fallback path checks if the...

0.00166EPSS
Exploits0References3
Rows per page
Query Builder