13054 matches found
Important: libcap
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Important: buildah
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Important: cni-plugins
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Important: docker
Issue Overview: The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. A crafted archive can create or overwrite files outside the intended destination. CVE-2026-171...
Important: docker
Issue Overview: The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. A crafted archive can create or overwrite files outside the intended destination. CVE-2026-171...
Important: amazon-ecr-credential-helper
Issue Overview: The HTTP/2 server could refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client could exploit this to...
Important: oci-add-hooks
Issue Overview: The HTTP/2 server could refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client could exploit this to...
Important: yq
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Important: cni-plugins
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...
Amazon Linux 2 : cri-tools (ALAS-2026-4042)
The version of cri-tools installed on the remote host is prior to 1.32.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4042 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority...
Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_88188)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688188 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple E...
Rocky Linux 10.2 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2026_88336)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688336 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 net/http: net/http/internal/http2: golang.org/x/net/http2:...
CVE-2026-89911
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component. A guest operating system can trigger an integer overflow in the TLB Translation Lookaside Buffer Invalidation by Range mechanism. This occurs when the hypervisor incorrectly handles a large range value provided by...
cve-exposure-monitor
cve-exposure-monitor checks NVD, CISA KEV, GitHub and Reddit...
DEBIAN-CVE-2026-98948
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumflower: Fix port range register leak in tmpltcreate mlxswspflowertmpltcreate parses a flowclsoffload template into a stack-local struct mlxswspaclruleinfo purely to compute rulei.values.elusage. Parsing can acquire...
CVE-2026-98948
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumflower: Fix port range register leak in tmpltcreate mlxswspflowertmpltcreate parses a flowclsoffload template into a stack-local struct mlxswspaclruleinfo purely to compute rulei.values.elusage. Parsing can acquire...
UBUNTU-CVE-2026-98948
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumflower: Fix port range register leak in tmpltcreate mlxswspflowertmpltcreate parses a flowclsoffload template into a stack-local struct mlxswspaclruleinfo purely to compute rulei.values.elusage. Parsing can acquire...
CVE-2026-98948
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumflower: Fix port range register leak in tmpltcreate mlxswspflowertmpltcreate parses a flowclsoffload template into a stack-local struct mlxswspaclruleinfo purely to compute rulei.values.elusage. Parsing can acquire...
CLSA-2026-1792758155 golang: Fix of 2 CVEs
CVE-2026-78669: net/http - track HTTP/2 outbound stream flow-control windows as a delta against a shared connection-level initial window, so a SETTINGSINITIALWINDOWSIZE change is O1 instead of iterating over every open stream, preventing CPU exhaustion by a peer sending many SETTINGS frames -...
CVE-2026-98974
In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...