3 matches found
EUVD-2026-66756
stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...
CVE-2026-26445
stomper at commit 5e2741e is vulnerable to a Denial of Service caused by a combination of partial STOMP frames and the broker's use of edge-triggered epoll (EPOLLET) with MSG_PEEK in recv(). A malicious client can send incomplete STOMP frames while keeping TCP connections open, causing sockets to...
Linux Distros Unpatched Vulnerability : CVE-2026-59920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's STOMP encoder...