20969 matches found
SUSE-SU-2026:22835-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...
CVE-2026-64094
A flaw was found in the Linux kernel's batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced component, specifically within its Bridge Loop Avoidance BLA feature. This vulnerability occurs when a network interface is unexpectedly removed while the system attempts to send an Address...
CVE-2026-64175
A flaw was found in the Linux kernel's iwlwifi driver. When the Wi-Fi firmware crashes, the driver continues to process network transmission requests inefficiently. This creates a continuous loop of attempting to send data through an unresponsive firmware, consuming excessive CPU resources and...
CVE-2026-56852: Loop with Unreachable Exit Condition
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
PT-2026-61948
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.11.5-1.1 Description Logic errors in automatic certificate-based public key authentication can cause clients to loop indefinitely when configured certificates are missing or are repeatedly rejected by a server,...
CVE-2026-59849: Loop with Unreachable Exit Condition
A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...
CVE-2026-59843: Loop with Unreachable Exit Condition
A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel writes to loop indefinitely and consume CPU, leading to denial of service...
EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2725)
According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer...
EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2026-2818)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately...
EulerOS Virtualization 2.12.0 : util-linux (EulerOS-SA-2026-2810)
According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerabilit...
EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock ...
EulerOS Virtualization 2.12.0 : expat (EulerOS-SA-2026-2771)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.7.5 allows an infinite loop while parsing DTD content.CVE-2026-32777 libexpat before 2.7.5 allows a NULL pointer...
SUSE SLES12 Security Update : glib-networking (SUSE-SU-2026:3121-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3121-1 advisory. This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite...
EulerOS Virtualization 2.10.0 : expat (EulerOS-SA-2026-2849)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately...
GHSA-PG7V-JWJ7-P798 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service
Summary Pillow's EPS parser PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive. A crafted EPS file can cause Image.open to seek backwards to the same directive and parse it repeatedly, resulting in an infinite loop and CPU denial of service. The issue is triggered...
EUVD-2026-43741
Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service...
protobufjs: Denial of Service via infinite loop in .proto option parsing
Summary protobufjs parsed option names by advancing through schema tokens until it reached an = token, without checking for end of input. A crafted .proto schema that opens an option declaration but ends prematurely could cause the option parser to loop without ever terminating. This affects the...
NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing
NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing vulnerability discovered by ? in WordPress Npm protobufjs versions = 7.5.0, = 7.6.4...
GHSA-J3F2-48V5-CCWW protobufjs: Denial of Service via infinite loop in .proto option parsing
Summary protobufjs parsed option names by advancing through schema tokens until it reached an = token, without checking for end of input. A crafted .proto schema that opens an option declaration but ends prematurely could cause the option parser to loop without ever terminating. This affects the...