3551 matches found
curl: MQTT: Missing upper bound on incoming Remaining Length allows server-controlled long wait
Curl's MQTT implementation accepts any valid Remaining Length advertised by the server without an explicit upper bound beyond the MQTT spec maximum of 268,435,455 bytes. A malicious server can send a PUBLISH packet claiming this maximum size but provide only minimal payload, causing curl to wait...
WordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Prowess versions = 1.8.1...
curl: PROTOCOL-LEVEL: Persistent UDP Amplification and Cache Poisoning via Alt-Svc Logic Flaw
Summary A structural logic flaw in the libcurl Alt-Svc header parser allows attack attributes specifically persist and max-age to "leak" from one service definition to another. We have successfully chained this logic bug with curl's HTTP/3 QUIC support to demonstrate a Persistent UDP Amplificatio...
PT-2026-8144
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where userspace can trigger kernel warnings within the drm gem change handle ioctl function. This occurs because GEM buffer object handles are represent...
PT-2026-2950
Name of the Vulnerable Software and Affected Versions Undici versions prior to 7.18.0 Undici versions prior to 6.23.0 Description Undici is an HTTP/1.1 client for Node.js. A malicious server can insert thousands of compression steps due to an unbounded number of links in the decompression chain a...
PT-2026-8167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s t7xx driver related to handling data reception in the DPMAIF RX path. The t7xx dpmaif set frag to skb function does not adequately validate the number...
PT-2026-8191
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc6-next-2026012 Description A flaw exists in the Linux kernel's cgroup/dmem subsystem where a NULL pointer dereference can occur when setting the maximum memory limit. This issue is triggered when...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992869)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992869 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS UBSAN complains about array-index-out-of-bounds:...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992836)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992836 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-993270)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993270 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of maxcorrreaderrors There is no input check when echo...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992509)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992509 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: Fix refcount leak in xivegetmaxprio offindnodebypath returns a node pointer with...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992222)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992222 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If getnumsdmaqueues or getnumxgmisdmaqueues is ...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992454)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992454 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS UBSAN complains about array-index-out-of-bounds:...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992303)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992303 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS:...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992241)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992241 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of maxcorrreaderrors There is no input check when echo...
Linux Distros Unpatched Vulnerability : CVE-2025-68350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exfat: fix divide-by-zero in exfatallocatebitmap The variable maxracount can be 0 in exfatallocatebitmap, which causes a divide-by-zero error in the subsequent...
SUSE CVE-2023-54104
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fslupm: Fix an off-by one test in funexecop 'op-cs' is copied in 'fun-mchipnumber' which is used to access the 'mchipoffsets' and the 'rnbgpio' arrays. These arrays have NANDMAXCHIPS elements, so the index must be...
CVE-2023-54104
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fslupm: Fix an off-by one test in funexecop 'op-cs' is copied in 'fun-mchipnumber' which is used to access the 'mchipoffsets' and the 'rnbgpio' arrays. These arrays have NANDMAXCHIPS elements, so the index must be...
CVE-2023-54104
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fslupm: Fix an off-by one test in funexecop 'op-cs' is copied in 'fun-mchipnumber' which is used to access the 'mchipoffsets' and the 'rnbgpio' arrays. These arrays have NANDMAXCHIPS elements, so the index must be...
CVE-2023-54104
CVE-2023-54104 affects the Linux kernel in the mtd:rawnand:fsl_upm driver. The issue is an off-by-one test in fun_exec_op() where data from op-cs is copied into fun->mchip_number, which is used to index mchip_offsets and rnb_gpio arrays (NAND_MAX_CHIPS elements). An out-of-bounds access could ...