241 matches found
CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...
CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...
CVE-2026-31933
Suricata (network IDS/IPS/NSM) is affected by CVE-2026-31933 due to a quadratic/slowdown condition triggered by specially crafted traffic in IDS mode. The issue impacts versions prior to 7.0.15 and 8.0.4, and has been patched in 7.0.15 and 8.0.4. The vulnerability stems from the stream inspection...
CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...
CVE-2026-31932 Suricata krb5: quadratic complexity in krb5 buffering
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...
CVE-2026-31932 Suricata krb5: quadratic complexity in krb5 buffering
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...
CVE-2026-31932
CVE-2026-31932 affects Suricata (network IDS/IPS/NSM). The issue is described as inefficiency (quadratic complexity) in KRB5 buffering that can lead to performance degradation. Affected versions are prior to 7.0.15 and 8.0.4, with a patch applying in 7.0.15 and 8.0.4. CVSS:3.1 base score 7.5 (HIG...
CVE-2026-31932 Suricata krb5: quadratic complexity in krb5 buffering
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4...
CLSA-2026-1773505272 python3.11: Fix of CVE-2025-6075
CVE-2025-6075: fix quadratic complexity in os.path.expandvars...
CLSA-2026-1773480954 python3.9: Fix of CVE-2025-6075
CVE-2025-6075: fix quadratic complexity in os.path.expandvars...
CLSA-2026-1773323311 python3.11: Fix of CVE-2025-6075
CVE-2025-6075: fix quadratic complexity in os.path.expandvars...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcs (UTSA-2026-005305)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005305 advisory. Tornado is a Python web framework and asynchronous networking library. The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has...
CVE-2025-47911
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76808 CVE-2025-47911 affecting package yq 4.45.1-1
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76977 CVE-2025-47911 affecting package packer for versions less than 1.9.5-18
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
AZL-76886 CVE-2025-47911 affecting package cloud-provider-kubevirt 0.5.1-2
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
CVE-2025-47911
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
CVE-2025-47911 Quadratic parsing complexity in golang.org/x/net/html
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...
Inefficient Algorithmic Complexity
Overview golang.org/x/net/html is a package that implements an HTML5-compliant tokenizer and parser. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the html.Parse function due to quadratic parsing complexity when processing certain inputs, which can lea...
CVE-2026-22263 Suricata http1: quadratic complexity in headers parsing over multiple packets
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available...