CVE-2026-90234

A flaw was found in the Linux kernel's Network File System NFS client. When an NFS server grants a delegation, the client may fail to record it and not send a DELEGRETURN message. This can lead to a situation where the server believes the client still holds the delegation. If the server then...

DEBIAN-CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941 FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941 FreeRDP 2.3.0 before 3.32.0 Infinite Loop via RD Gateway Chunked Response

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

EUVD-2026-98706

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

CVE-2026-109941

The FreeRDP application versions 2.3.0 before 3.32.0 is vulnerable to an infinite loop within the http_chuncked_read function. This flaw allows a malicious RD Gateway to hang a client by transmitting an incomplete chunked response, such as a partial chunk-size line or footer, followed by a TLS sh...

CVE-2026-90075

A flaw was found in the Linux kernel's fqcodel network scheduler. A local attacker with CAPNETADMIN capabilities in a user namespace could exploit this by configuring a network device with an extremely large Maximum Transmission Unit MTU. This can lead to an integer overflow, causing an infinite...

CVE-2026-90053

A flaw was found in the Linux kernel's Hierarchical Token Bucket HTB scheduler. An unprivileged local user, by sending a specially crafted network packet, can trigger an infinite loop in the packet classification path. This can cause the system to soft lockup or panic, resulting in a Denial of...

CVE-2026-109941: Loop with Unreachable Exit Condition

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in httpchunckedread that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte reads ...

PT-2026-111536

FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http chuncked read that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte read...

ROS-20261013-73-0465

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261013-73-0107

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

7-Zip < 24.08 CopyCoder Infinite Loop DoS (ZDI-24-1606)

The version of 7-Zip installed on the remote host is prior to 24.08. It is, therefore, affected by a denial of service vulnerability as referenced in the ZDI-24-1606 advisory. - This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip...

CVE-2023-30226

CVE-2023-30226 Rizin is a reverse engineering framework forked from radare2, a flaw was discovered in its ELF parser code that would allow for a crafted file to perform a denial of service. This would prevent a user from being able to load the file into rizin but still hold no impact on the...

MGASA-2026-0493 Updated wireshark package fixes security vulnerabilities

Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-95386 Heap-based Buffer Overflow in Wireshark. CVE-2026-95387 Heap-based Buffer Overflow in Wireshark. CVE-2026-95388 Heap-based Buffer Overflow in Wireshark. CVE-2026-95389 NULL Pointer Dereference in Wireshark...

dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...