CLEANSTART-2024-CW43891 MONGO and ZigBee TLV dissector infinite loops in Wireshark 4

Security vulnerability affects the wireshark package. MONGO and ZigBee TLV dissector infinite loops in Wireshark 4...

CVE-2026-78844

Summary javadelight delight-nashorn-sandbox 0.5.5 suffers from Uncontrolled Resource Consumption. The sandbox enforces maxCPUTime limits by statically injecting interruption checks into JavaScript loops, but the sandbox fails to disable dynamic code evaluation. An attacker can use these functions...

Progress Software Telerik Document Processing Libraries Resource management error vulnerability

Versions of Progress Software Telerik Document Processing Libraries prior to 2026.3.1027 contain a security vulnerability. This vulnerability stems from uncontrolled recursion, infinite loops, lack of loop condition checks, and inefficient regular expressions in RadSpreadProcessing and...

XPDF input validation error vulnerability

Security vulnerabilities exist in xpdf versions 4.06 and earlier. These vulnerabilities stem from improper validation of the progression order field in JPEG 2000 images, potentially leading to infinite loops...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the btintelpcie driver, which fails to perform boundary verification on the DMA index frbdtag and crhia provided by the device during the RX path. This may lead to out-of-bounds pointer dereferencing ...

OW2 ASM Resource Management Vulnerability

In OW2 and ASM versions prior to 9.11.1, there was a resource management error vulnerability. This vulnerability stemmed from a 16-bit forward reference offset in Label.resolve, which was truncated when the rewrite method exceeded 64 KB. This could lead to infinite loops. An attacker could provid...

Pillow -- multiple vulnerabilities

The Pillow project published security advisories for issues fixed in release 13.0.0. They include an argument injection in the Ghostscript call used for EPS images, heap buffer overflows in several image decoders that can lead to code execution, and infinite loops and unbounded memory use when...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations why: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check...

Astra Linux - vulnerability in qt4-x11, qtbase-opensource-src

An issue was found in Qt versions prior to 5.15.15, 6.x versions prior to 6.2.10, and 6.3.x through 6.5.x prior to 6.5.3. There are infinite loops in recursive entity expansion...

Rocky Linux 9 [CIQ] Security Update: adwaita-qt-debuginfo / adwaita-qt-debugsource / adwaita-qt5 / etc Multiple Vulnerabilities (crlsa-2023_6369)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20236369 advisory. qt: buffer over-read via a crafted reply from a DNS server CVE-2023-33285 qt: allows remote attacker to bypass security restrictions caused by flaw in...

AlmaLinux 9.2 [TuxCare] Security Update: qt5-qtbase / qt5-qtbase-common / qt5-qtbase-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1764026530)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764026530 advisory. - In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReade...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the improper validation of the usSize field for voltage objects in the VoltageObjectInfo table provided by the VBIOS in the drm/amd/powerplay module. This could lead to infinite loops or heap out-of-bound reads...

Astra Linux – Vulnerability in Wireshark

MONGO and ZigBee TLV dissector have infinite loops in Wireshark versions 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22. These bugs allow for denial of service through packet injection or with properly crafted capture files...

SUSE-SU-2026:3995-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. - CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. - CVE-2026-15167: Denial of Service via DBS Etherwatch file parser crash...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104992)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104992 advisory. Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input,...

CVE-2026-6827

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces SVG/MathML, dangerous content such as HTML integration points SVG , MathML and mutation-XSS parser-differential payloads could...

CLSA-2026-1786446507 libssh: Fix of 3 CVEs

CVE-2026-59843: reject a peer-supplied maximum packet size of zero to prevent infinite loops in channel writes - CVE-2026-59848: track outstanding SFTP request IDs and reject responses with unknown IDs to prevent unbounded client memory growth - CVE-2026-59845: handle ProxyCommand fork failures...

Security update for wireshark

This update for wireshark fixes the following issues: Update to version 4.6.7: CVE-2026-5299: ICMPv6 dissector crash bsc1263757. CVE-2026-5401: AFP dissector crash bsc1263756. CVE-2026-5402: TLS dissector crash and possible code execution bsc1263755. CVE-2026-5403: SBC audio codec crash bsc126376...

Suricata 8.0.x < 8.0.6 Multiple Vulnerabilities

The version of OISF Suricata installed on the remote host is 8.x prior to 8.0.6. It is, therefore, affected by multiple vulnerabilities, including: - Suricata could be crashed or made to enter an infinite loop when processing crafted network traffic, leading to denial of service. CVE-2026-63446 -...

pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)

Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page with a not terminated inline image, as done when extracting the page text for example. It only affects the ASCII85 and ASCIIHex filters. Patches This...