46155 matches found
BIT-GOLANG-2026-78667 Lack of limit on size of parsed Range headers in net/http
When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...
BIT-GOLANG-2026-78663 Double flow control refund on HTTP/2 server streams in net/http
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
BIT-GOLANG-2026-78660 HTTP/2 transport accepts malformed framing-related headers in net/http
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
BIT-GOLANG-2026-78659 HTTP/2 server memory exhaustion due to Trailer headers in net/http
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
BIT-GOLANG-2026-56866 HTTP/1 client connection desynchronization after CONNECT rejection in net/http
When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...
net-snmp:snmp_e2e_fuzzer: Null-dereference READ in ubsan_GetStackTrace
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5179014990594048 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpe2efuzzer Job Type: libfuzzerubsannet-snmp Platform Id: linux Crash Type:...
Security Update for Microsoft .NET Core (October 2026)
The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
Security Update for Microsoft .NET Core SDK (October 2026)
The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an...
PT-2026-124537
TuxCare rebuilt web3-net to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CVE-2026-49868: Out-of-bounds Read
RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, parsereply in sys/net/applicationlayer/dhcpv6/client.c omits minimum-length validation before passing IAPD and IANA option bodies to sub-option parsers. A...
Linux Distros Unpatched Vulnerability : CVE-2026-96957
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-96957 Note that...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the updateVF function within the net/sched/schhfsc.c component of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux net/sched/cls_bpf Buffer Overflow DoS
The vulnerability in the net/sched/clsbpf.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel sch_codel DoS
The vulnerability in the net/sched/schcodel.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availability of protected information...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the tipcupdatenametbl function in the net/tipc/namedistr.c component of the Linux kernel is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to cause service failures...
Linux net/sched/cls_flow.c Data Compromise
The vulnerability in the net/sched/clsflow.c component of the Linux operating system relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
Linux kernel addrconf_dad_failure() Buffer Overflow
The vulnerability of the addrconfdadfailure function in the net/ipv6/addrconf.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the rtwpcirxnapi function in the drivers/net/wireless/realtek/rtw88/pci.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of...
Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS
The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux mana_gd_create_mana_wq_cq() function Heap Buffer Overflow DoS
The vulnerability in the managdcreatemanawqcq function within the drivers/net/ethernet/microsoft/mana/gdmamain.c file on Linux kernel systems is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...