Amazon Linux 2 : libpcap (ALAS-2026-3927)

The version of libpcap installed on the remote host is prior to 1.5.3-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3927 advisory. In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit...

Linux Distros Unpatched Vulnerability : CVE-2026-96421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-96421 Note that Nessus relies o...

Important: libpcap

Issue Overview: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the...

Fedora 45 : python-quart-trio / python-streamlink / python-urllib3 (2026-9a652403b1)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9a652403b1 advisory. Update python-urllib3 to version 2.8.0, fixing three security issues: - The TLS configuration for HTTPS proxies could be ignored or overridden. Rated high...

PT-2026-108471

Security vulnerability affects the argo-workflows package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS MAX FRAME SIZE with a value of 0...

PT-2026-102667

Name of the Vulnerable Software and Affected Versions urllib3 versions 2.6.2 through 2.7.x Description An issue exists where HTTPResponse.stream and HTTPResponse.read chunked can enter an infinite loop. This occurs when a server sends a chunked Deflate response Transfer-Encoding: chunked and...

PT-2026-102890

Name of the Vulnerable Software and Affected Versions iperf3 versions prior to 3.22 Description A denial of service issue allows unauthenticated remote attackers to cause the server's UDP receive worker to enter an unrecoverable infinite loop. This is achieved by sending a single crafted...

CVE-2026-102253: Loop with Unreachable Exit Condition

iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash-loop the server's UDP receive worker into an unrecoverable infinite loop by sending a single crafted control-channel parameter message followed by one 16-byte UDP datagra...

CVE-2026-96421: Improperly Controlled Sequential Memory Allocation

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

Wireshark : CVE-2026-96421 : USB HID protocol dissector infinite loop and memory leak

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-96421

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-95386

TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...

PT-2026-108994

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-95386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service CVE-2026-95386 Note that Nessus relies on the presence of the package as reported by th...

Linux Distros Unpatched Vulnerability : CVE-2026-96418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-96418 Note that Nessus relies on the presence of t...

CVE-2026-97546

A flaw was found in the Linux kernel's XFS file system. A local user could trigger this vulnerability by mounting or repairing a corrupted file system containing zero-length directory entries. When salvaging these malformed entries during directory repair operations, the kernel fails to advance a...

Infinite loop

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Infinite loop via the afterdoctypenamestate handler in Domino's HTML parser lib/HTMLParser.js, used by @angular/platform-server for server-side rendering. Whe...

GHSA-F67J-2JQW-JPQ7 Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

A Denial of Service DoS vulnerability exists in @angular/platform-server's DOM emulation parser domino. When processing untrusted user input containing an incomplete DOCTYPE declaration ending with whitespace before EOF such as , and keyword matching advance nextchar, the EOF branch case -1: // E...

Angular SSR: Denial of Service (DoS) via Infinite Loop on Malformed DOCTYPE

A Denial of Service DoS vulnerability exists in @angular/platform-server's DOM emulation parser domino. When processing untrusted user input containing an incomplete DOCTYPE declaration ending with whitespace before EOF such as , and keyword matching advance nextchar, the EOF branch case -1: // E...

CVE-2026-98159

A flaw was found in the Linux kernel's MediaTek MT7921 Wi-Fi driver. The driver fails to validate the region count and record lengths when parsing Country Location Control CLC firmware data. An attacker capable of supplying a malformed firmware image could trigger an out-of-bounds memory access o...