The vulnerability in the `fs/smb/server/server.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/server.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2026-56862

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

CVE-2026-17229

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-17004

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-17004

CVE-2026-17004 affects IBM i on releases 7.6, 7.5, 7.4, and 7.3. The vulnerability could allow a remote attacker to cause a denial of service via an infinite loop on host servers. IBM assigns CVSS v3.1 base score 7.5 (HIGH) with network attack vector, no user interaction required, and impact limi...

EUVD-2026-58235

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-17004 IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-17004 IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

EUVD-2026-58233

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-17229 IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...

CVE-2026-17229

IBM i 7.3–7.6 are affected by CVE-2026-17229, a remote-denial-of-service caused by an infinite loop in host servers. Impact: HIGH (CVSS 7.5) with network access and no user interaction required. Affected component: host servers in IBM i V7.x ranges; root cause: loop condition leading to DoS. Reme...

CVE-2026-73646

creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:05+00:00| published-proof-of-concept| https://github.com/postcss/postcss/security/advisories/GHSA-r28c-9q8g-f849...

CVE-2026-12236

The CVE concerns the Zephyr Bluetooth host GATT client, where parse_read_std_char_desc() can loop indefinitely if an attacker causes a peer to reply with rsp->len = 0 during BT_GATT_DISCOVER_STD_CHAR_DESC. The loop uses rsp->len to advance the pointer and decrement remaining length, but rsp...

Updated roundcubemail package fixes security vulnerabilities

Updated roundcubemail to the 1.6.17 version to fix security vulnerabilities: Some XSS and DoS errors have been corrected. Various vulnerabilities in the password plugin have been fixed. An infinite loop has been fixed...

python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

A flaw was found in the Python tarfile module. When processing a specially crafted tar archive opened in 'streaming mode' mode='r|', the module does not properly handle the end-of-file EOF condition. This can cause the tarfile module to enter an infinite loop, leading to a Denial of Service DoS f...

RLSA-2026:54210 Moderate: dhcpcd security update

The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fixes: dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Route...

dhcpcd security update

An update is available for dhcpcd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dhcpcd package provides a minimalistic network configuration daemon that...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

python: Python tarfile module: Denial of Service via improper EOF handling in streaming mode

A flaw was found in the Python tarfile module. When processing a specially crafted tar archive opened in 'streaming mode' mode='r|', the module does not properly handle the end-of-file EOF condition. This can cause the tarfile module to enter an infinite loop, leading to a Denial of Service DoS f...

EUVD-2026-57636

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...