14759 matches found
PT-2026-98403
Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...
CVE-2026-92550: Memory Allocation with Excessive Size Value
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...
CVE-2026-97571
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...
CVE-2026-98021
In the Linux kernel, the following vulnerability has been resolved: net: reject oversized txqueuelen at netlink parse time rtnlcreatelink assigns IFLATXQLEN directly to dev-txqueuelen without going through netifchangetxqueuelen, so a device created with "ip link add ... txqueuelen 500000" bypasse...
PT-2026-98404
Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description A pre-authentication attacker can exploit the way type size and count are handled to trigger excessive memory allocation, which may result in a denial of service. Recommendations Upgrad...
CVE-2026-97571: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate TPA buffer allocation failures in bnxtqueuememalloc bnxtalloconetpainfodata returns -ENOMEM as soon as one allocation fails. This leaves the remaining rxr-rxtpa entries zeroed. bnxtqueuememalloc discards that...
PT-2026-98511
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function fails to propagate return values from bnxt alloc one tpa info data. When bnxt alloc one tpa info data return...
CVE-2026-97572: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Propagate RX ring init failures in bnxtinitnic bnxtinitrxrings returns an error when bnxtalloconerxring fails, but bnxtinitnic discards that return value and calls bnxtinitchip, which enables TPA. If an allocation fails,...
The vulnerability of the handleReadableStream() function in the file pdns/dnsdistdist/doq.cc, and the processH3DataEvent() function in the file pdns/dnsdistdist/doh3.cc, both from the DNS load balancer and proxy for DNS traffic, allows a attacker to cause a service failure.
The vulnerability of the handleReadableStream function in the pdns/dnsdistdist/doq.cc file and the processH3DataEvent function in the pdns/dnsdistdist/doh3.cc file, both from the DNS load balancer and proxy components, is related to uncontrolled memory allocation. Exploiting this vulnerability...
The vulnerability of the libssh library, related to uncontrolled memory allocation, allows a hacker to cause a service failure.
The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the bit expression processing mechanisms $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear in the MongoDB database management system allows a hacker to trigger a service failure.
The vulnerability of the bit expression processing mechanisms $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear in the MongoDB database management system is related to improper handling of sequential memory allocation. Exploiting this vulnerability can allow an attacker to cause service...
Linux Distros Unpatched Vulnerability : CVE-2026-88382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 Note that Nessus relies...
openSUSE 16: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / etc (openSUSE-SU-2026:21891-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21891-1 advisory. - CVE-2021-36374: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats bsc1188469. - CVE-2025-7962:...
SUSE CVE-2026-93823
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...
org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
DEBIAN-CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
AZL-103736 CVE-2026-97440 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...
CVE-2026-97440
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...