15878 matches found
SUSE CVE-2026-85730
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil calls indexOfNewline, receives -1 at the end of input, and...
Security Bulletin:Vulnerabilities exists in cyclops of IBM Netezza Appliance
Summary Vulnerabilities identified in cyclops of IBM Netezza Appliance have been addressed in version 11.3.1.4. Vulnerability Details CVEID:CVE-2026-59843 DESCRIPTION: A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing...
net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...
net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...
Security update for wireshark
This update for wireshark fixes the following issues: CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector crash...
MGASA-2026-0382 Updated tor packages fix security vulnerabilities
An out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type CVE-2026-77642. A NULL write after free when sending a CONFLUXSWITCH cell fails, resulting in a crash CVE-2026-77641. An infinite loop when decompressing a truncated zlib/gzip stream with...
EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-3339)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 When processing HTTP/...
EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-3264)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 When processing HTTP/...
EulerOS 2.0 SP12 : glib-networking (EulerOS-SA-2026-3260)
According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...
Fedora 44 : perl-XML-Bare (2026-5c3f4c8337)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5c3f4c8337 advisory. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue. Fixes...
EulerOS 2.0 SP12 : glib-networking (EulerOS-SA-2026-3335)
According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...
Fedora 43 : perl-XML-Bare (2026-14e358a2a2)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-14e358a2a2 advisory. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue. Fixes...
CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
UBUNTU-CVE-2026-78132
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax...
Security update for wireshark
This update for wireshark fixes the following issues: CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. CVE-2026-15167: Denial of Service via DBS Etherwatch file parser crash...
SUSE-SU-2026:3994-1 Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. - CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. - CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector...
Security Bulletin: Vulnerabilities exists in IBM Netezza Software
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.4. Vulnerability Details CVEID:CVE-2025-14920 DESCRIPTION: Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows...
PT-2026-89676
Name of the Vulnerable Software and Affected Versions strongSwan versions 4.6.2 through 6.0.7 Description An infinite loop occurs during PKCS5 decryption, which is a standard for password-based encryption. Recommendations Update strongSwan versions 4.6.2 through 6.0.7 to a newer version that...
PT-2026-89738
Name of the Vulnerable Software and Affected Versions strongSwan versions 5.1.3 through 6.0.7 Description An infinite loop exists in the x509 plugin's attribute certificate parser when processing ietfAttrSyntax. This issue can lead to a Denial of Service DoS and is exploitable over the network...
