Lucene search
+L

519 matches found

OSV
OSV
added 2025/09/03 8:56 p.m.17 views

CVE-2025-58056 Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters LF as a chunk-size line...

6.3CVSS6.3AI score
SaveExploits0References9
CVE
CVE
added 2025/09/03 8:56 p.m.230 views

CVE-2025-58056

The CVE-2025-58056 vulnerability in Netty (affecting 4.1.124.Final and 4.2.0.Alpha3 through 4.2.4.Final) allows HTTP request smuggling when a reverse proxy treats LF as a chunk-size terminator, bypassing CRLF requirements. Netty requires CRLF per HTTP/1.1, but due to LF handling, a proxy can send...

7.5CVSS6.3AI score0.00677EPSS
SaveExploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/03 8:56 p.m.2 views

CVE-2025-58056 Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters LF as a chunk-size line...

6.3CVSS6.3AI score0.00677EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 ...

7.3CVSS6.7AI score0.00171EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-17533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MatVarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdupvprintf when uninitialized memor...

8.2CVSS7.4AI score0.01895EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2025/08/22 11:28 p.m.7 views

SUSE CVE-2025-38652

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

6.6CVSS6.5AI score0.00171EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/08/22 11:28 p.m.9 views

SUSE CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS6.7AI score0.00143EPSS
SaveExploits0References3
NVD
NVD
added 2025/08/22 4:15 p.m.10 views

CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS0.00143EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/22 4:15 p.m.5 views

DEBIAN-CVE-2025-38652

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

7.1CVSS6AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/22 4:15 p.m.9 views

CVE-2025-38652

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

7.3CVSS0.00171EPSS
SaveExploits0References11
OSV
OSV
added 2025/08/22 4:15 p.m.10 views

UBUNTU-CVE-2025-38652

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

7.3CVSS6.4AI score0.00171EPSS
SaveExploits0References40
OSV
OSV
added 2025/08/22 4:15 p.m.8 views

UBUNTU-CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS5.9AI score0.00143EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/22 4:02 p.m.9 views

CVE-2025-38667 iio: fix potential out-of-bound write

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS6.4AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2025/08/22 4:02 p.m.6 views

CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS5.9AI score0.00143EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2025/08/22 4:02 p.m.40 views

CVE-2025-38667

CVE-2025-38667 relates to the Linux kernel iio path, where a potential out-of-bounds write occurred when writing to a 20-character buffer. The fix adds a size check to ensure input fits the buffer and appends a zero terminator after copying the data, preventing OoB access. Impact is described as ...

7.8CVSS6.7AI score0.00143EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/08/22 4:02 p.m.18 views

CVE-2025-38667 iio: fix potential out-of-bound write

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS0.00143EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/08/22 4:02 p.m.13 views

CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

7.8CVSS6.5AI score0.00143EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/08/22 4:00 p.m.16 views

CVE-2025-38652 f2fs: fix to avoid out-of-boundary access in devs.path

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

7.3CVSS0.00171EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2025/08/22 4:00 p.m.17 views

CVE-2025-38652

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

7.3CVSS6AI score0.00171EPSS
SaveExploits0
OSV
OSV
added 2025/08/22 4:00 p.m.8 views

CVE-2025-38652 f2fs: fix to avoid out-of-boundary access in devs.path

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in devs.path - touch /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - truncate -s $102410241024 \ /mnt/f2fs/012345678901234567890123456789012345678901234567890123 - touc...

7.3CVSS6.1AI score
SaveExploits0References14
Rows per page
Query Builder