CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

CVE-2024-44337

CVE-2024-44337 The package "github.com/gomarkdown/markdown" is a Go library for parsing Markdown text and rendering it as HTML. In pseudo-version 'v0.0.0-20240729232818-a2a9c4f' corresponding to commit 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252' and earlier, there is a logic issue in the paragraph...

dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

CVE-2022-0778

CVE-2022-0778 貢献者 정준수@jeongjunsoo 概要 CVE-2022-0778脆弱性は、OpenSSLで素数の平方根を計算するBNmodsqrt関数に影響を与えます。 この関数が素数ベースでない悪意を持って操作された証明書を処理するとき、パッチ未適用のサーバーはDoS攻撃にさらされる可能性があります。 対象 OpenSSL 1.0.2 OpenSSL 1.1.1 OpenSSL 3.0 パッチ前 root@kitploit: i = 1; if !BNmodsqrt, b, p, ctx goto end; while !BNisonet i++; if i == ...

Security Bulletin: The Pre-Validation App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Pre-Validation App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-33750 DESCRIPTION: The...

AZL-104286 CVE-2026-97900 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero. This breaks the invariant upheld by drmexeclockobj, where every ent...

CVE-2026-97546

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

EUVD-2026-86754

In the Linux kernel, the following vulnerability has been resolved: drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero. This breaks the invariant upheld by drmexeclockobj, where every ent...

CVE-2026-97900

The Linux kernel contains a vulnerability in the drm/drm_exec component where drm_exec_prepare_array() fails to call drm_exec_lock_contended() when num_objects is zero. This oversight breaks the locking invariant required by drm_exec_lock_obj() . Specifically, drivers that chain multiple calls, s...

CVE-2026-97900 drm/drm_exec: fix up contended obj when num_objects is 0

In the Linux kernel, the following vulnerability has been resolved: drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero. This breaks the invariant upheld by drmexeclockobj, where every ent...

EUVD-2026-86854

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

CVE-2026-97546 xfs: don't spin forever on zero-length dirents when salvaging them

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

cve-2021-45046

log4j RCE CVE-2021-44228 已在 2.15 版本中修复，但新发现了 CVE-2021-45046（引发 DoS）漏洞。 以下是测试结果。 测试环境 log4j-2.15.0 api, core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 语法测试 - 无漏洞 2. 插入任意 ctx 对象名 - 无漏洞 3. 插入与接收 context 的对象相同名称 - 无限循环导致 DoS 4. 以 $jndi:ldap://127.0.0.1ldap 服务器地址 形式插入...

UBUNTU-CVE-2026-97546

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

Linux Distros Unpatched Vulnerability : CVE-2026-97546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that...

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 概念実証（Proof-of-Concept） 概要 これは、libX11 のサービス拒否（DoS）脆弱性 CVE-2023-43786 の概念実証（PoC）です。 この PoC は整数オーバーフローを引き起こし、無限ループを発生させます。 影響を受けるバージョンは、libX11 1.8.6 以下および libXpm 3.5.16 です。 詳細な理解のためには、付随するブログ記事をご覧ください。 依存関係 脆弱性のあるバージョンの libXpm と libX11 xpmutils がインストールされていること 使用方法 1. xpmutils...

DEBIAN-CVE-2026-93828

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

AZL-103604 CVE-2026-93828 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

CVE-2026-24688

CVE-2026-24688 - pypdf - 循環参照によるDoS脆弱性 このリポジトリには、CVE-2026-24688を発動させるための概念実証コードが含まれています。 概要 pypdfのアウトライン（ブックマーク）解析ロジックにおける重大なサービス拒否（DoS）脆弱性です。循環するアウトライン参照を含むPDFを処理すると、パーサーが無限ループに入り、メモリを継続的に割り当て続け、私のマシン（TM）では毎秒数百MBのメモリを消費し、最終的にシステム全体がクラッシュします。 これはアプリケーションのハングアップではなく、システムレベルのDoSです。 内容...

CVE-2026-93828

A vulnerability exists in the Linux kernel 's exfat filesystem module. Specifically, the function exfat_create_upcase_table() can enter an infinite loop due to an integer overflow when the size of the upcase table is set to zero (e.g., due to corrupted media or a misbehaving device). The issue is...