Lucene search
+L

32 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/08 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-19204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and...

8.7CVSS0.00293EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/07 11:17 a.m.4 views

DEBIAN-CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS0.00293EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/07 11:17 a.m.3 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS0.00293EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/07 10:19 a.m.27 views

CVE-2026-19204

Eclipse Jetty is vulnerable in its WebSocket component when auto-fragmentation is enabled. A remote, unauthenticated client can send a WebSocket frame with an unknown opcode and a very large declared payload length. Because unknown opcodes bypass the normal maximum frame size handling and payload...

8.7CVSS0.00293EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/09/07 10:19 a.m.10 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS0.00293EPSS
SaveExploits0
OSV
OSV
added 2026/09/07 10:19 a.m.4 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
added 2026/09/07 10:19 a.m.6 views

EUVD-2026-72335

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS0.00293EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/07 10:19 a.m.33 views

CVE-2026-19204

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.8 views

PT-2026-86673

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown opcodes bypass the normal maximum frame size...

8.7CVSS0.00293EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.11 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Check the length of skb for an unknown CC opcode. In hcicmdCompleteevt, if the command completion event has an unknown opcode, we assume that the first byte of skb-data contains the return status. However, th...

7.6CVSS4.8AI score0.00271EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/05/29 1:16 a.m.31 views

SUSE CVE-2026-46133

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

5.5CVSS5.7AI score0.00574EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2026-46133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv, a...

7.5CVSS5.9AI score0.00574EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/28 10:16 a.m.25 views

CVE-2026-46133

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

7.5CVSS0.00574EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/05/28 10:16 a.m.14 views

CVE-2026-46133

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

7.5CVSS5.4AI score0.00574EPSS
SaveExploits0References42
OSV
OSV
added 2026/05/28 10:16 a.m.21 views

UBUNTU-CVE-2026-46133

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

7.5CVSS5.7AI score0.00574EPSS
SaveExploits0References43
EUVD
EUVD
added 2026/05/28 9:35 a.m.21 views

EUVD-2026-32760

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

5.7AI score0.00574EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/28 9:35 a.m.50 views

CVE-2026-46133 RDMA/rxe: Reject unknown opcodes before ICRC processing

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

7.5CVSS0.00574EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/28 9:35 a.m.17 views

CVE-2026-46133

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject unknown opcodes before ICRC processing Even after applying commit 7244491dab34 "RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv", a single unauthenticated UDP packet can still trigger panic. That pat...

7.5CVSS5.7AI score0.00574EPSS
SaveExploits0References9Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/28 12:00 a.m.38 views

PT-2026-44256

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description An out-of-bounds read exists in the RDMA Soft RoCE rxe driver. A single unauthenticated UDP packet containing an unknown opcode can trigger a kernel panic. The issue occurs because the driv...

7.5CVSS6.1AI score0.00574EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/12/09 9:02 a.m.19 views

Bluetooth: hci_event: validate skb length for unknown CC opcode

...

7.6CVSS7AI score0.00271EPSS
SaveExploits0
Rows per page
Query Builder