1826 matches found
PT-2022-8019 · Unknown · Phoenixcoin
Name of the Vulnerable Software and Affected Versions: Phoenixcoin versions prior to 0.6.6.1-pxc Description: A problematic issue was found in the function CTxMemPool::accept of the file src/main.cpp, which can lead to denial of service. Recommendations: For versions prior to 0.6.6.1-pxc, upgrade...
GSD-2022-1007712 io_uring: fix multishot accept request leaks
iouring: fix multishot accept request leaks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
PT-2022-35967 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to a potential security vulnerability in the io uring subsystem, specifically with multishot accept request leaks. The actual impact and attack plausibility have not yet...
golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension
A flaw was found in golang.org. In x/text, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension...
PT-2022-35210 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.17 through v5.15.76 Description: A null pointer dereference issue was discovered in the tipc topsrv accept function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
PT-2022-35720
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.264 Description A null pointer dereference issue was found in the tipc topsrv accept function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...
PT-2022-34892 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.17 through v6.0.6 Description: A null pointer dereference issue was discovered in the tipc topsrv accept function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in versi...
PT-2022-35603 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: A null pointer dereference issue was found in the tipc topsrv accept function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-35429
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.17 through 5.10.152 Description A null pointer dereference issue was found in the tipc topsrv accept function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
kernel: mptcp: fix race on unaccepted mptcp sockets
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race on unaccepted mptcp sockets When the listener socket owning the relevant request is closed, it frees the unaccepted subflows and that causes later deletion of the paired MPTCP sockets. The mptcp socket's worker ca...
golang.org/x/text: Panic in language.ParseAcceptLanguage while parsing -u- extension
A flaw was found in golang.org. In x/text, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension...
golang.org/x/text: Panic in language.ParseAcceptLanguage while processing bcp47 tag
A flaw was found in golang.org. In x/text, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag...
PT-2025-41060
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the tipc topsrv accept function that can lead to a null pointer dereference. This issue was discovered by syzbot during testing. The root cause is tha...
GHSA-69CH-W2M2-3VJP golang.org/x/text/language Denial of service via crafted Accept-Language header
The BCP 47 tag parser has quadratic time complexity due to inherent aspects of its design. Since the parser is, by design, exposed to untrusted user input, this can be leveraged to force a program to consume significant time parsing Accept-Language headers. The parser cannot be easily rewritten t...
AZL-33589 CVE-2022-32149 affecting package influxdb for versions less than 2.6.1-17
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-43954 CVE-2022-32149 affecting package podman 4.1.1-26
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33575 CVE-2022-32149 affecting package containerized-data-importer for versions less than 1.55.0-20
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-34903 CVE-2022-32149 affecting package kubevirt for versions less than 1.2.0-1
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...
AZL-33605 CVE-2022-32149 affecting package kubevirt for versions less than 0.59.0-20
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...