Lucene search
+L

18 matches found

F5 Networks
F5 Networks
•added 2026/10/23 11:36 p.m.•5 views

K000163881: Golang vulnerabilities CVE-2026-46597, CVE-2026-46600, and CVE-2026-56852

Security Advisory Description CVE-2026-46597 An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message...

7.5CVSS6.1AI score0.00549EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/10/15 12:41 a.m.•15 views

CLEANSTART-2026-OF39616 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

7.5CVSS6.2AI score0.00549EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/14 10:56 a.m.•24 views

CVE-2026-101338

The NSD name server is vulnerable to a stack-based buffer overflow (CWE-121) when processing specially crafted SVCB or HTTPS resource records (RR ). If the wire format RDATA is filled to its limit, an additional ECH parameter can overwrite the stack. Furthermore, if the limit is exceeded, the bas...

8.7CVSS5.7AI score0.00321EPSS
SaveExploits0References1
osv_cleanstart
osv_cleanstart
•added 2026/10/06 12:36 a.m.•11 views

CLEANSTART-2026-QS35295 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the temporal-server package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

7.5CVSS6.2AI score0.00549EPSS
SaveExploits0References3
Oracle linux
Oracle linux
•added 2026/10/05 12:00 a.m.•9 views

bind9.18 security update

32:9.18.29-14.10 - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent memory leak on following HTTPS/SVCB RR CVE-2026-81563 - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs CVE-2026-80274 - Reject oversized negative cached records ear...

7.5CVSS5.8AI score0.00569EPSS
SaveExploits0
osv_cleanstart
osv_cleanstart
•added 2026/09/29 12:34 a.m.•10 views

CLEANSTART-2026-JY84269 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

9.8CVSS6.2AI score0.00549EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/26 12:37 a.m.•9 views

CLEANSTART-2026-UV13195 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

9.8CVSS6.2AI score0.00549EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/25 12:37 a.m.•16 views

CLEANSTART-2026-UW01698 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

9.8CVSS6.2AI score0.00549EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/24 6:49 a.m.•8 views

CLEANSTART-2026-RJ45825 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Security vulnerability affects the fluent-operator package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

9.8CVSS6.2AI score0.00549EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•12 views

PT-2026-105251

Security vulnerability affects the argo-cd package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

9.8CVSS5.9AI score0.00549EPSS
SaveExploits0References4
osv_cleanstart
osv_cleanstart
•added 2026/09/10 12:49 a.m.•20 views

CLEANSTART-2026-LE73008 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

Multiple security vulnerabilities affect the prometheus-redis-exporter package. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

9.8CVSS6.3AI score0.00692EPSS
SaveExploits2References24
osv_bit
osv_bit
•added 2026/08/17 11:39 a.m.•19 views

BIT-GOLANG-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

7.5CVSS6.2AI score0.00549EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2026/07/25 8:05 a.m.•18 views

Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

...

7.5CVSS8AI score0.00549EPSS
SaveExploits0
osv_azl
osv_azl
•added 2026/07/21 8:17 p.m.•21 views

AZL-93198 CVE-2026-46600 affecting package golang 1.25.14-1

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

7.5CVSS6.2AI score0.00549EPSS
SaveExploits0References1
Mend
Mend
•added 2026/07/21 7:18 p.m.•4 views

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

8.7CVSS6.4AI score0.00549EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/07/14 5:29 p.m.•14 views

Uncaught Exception

Overview std/net is a Go standard library package std/net Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report:Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. Remediation Upgrade std/net to...

8.7CVSS7.9AI score0.00549EPSS
SaveExploits0References3
Mend
Mend
•added 2026/06/25 5:24 a.m.•4 views

CVE-2026-12244

If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted SVCB RR with an rdata size of 65512, that let's an uint16t variable that is used to allocate space needed for the RR wrap because total size 65535,...

8.8CVSS6AI score0.00487EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•7 views

CVE-2026-12244: Integer Overflow or Wraparound

If NSD is configured as secondary for a zone, the primary of that zone can crash NSD with an AXFR containing a DNS message with a special crafted SVCB RR with an rdata size of 65512, that let's an uint16t variable that is used to allocate space needed for the RR wrap because total size 65535,...

8.8CVSS6AI score0.00487EPSS
SaveExploits0References4
Rows per page
Query Builder