Lucene search
+L

351 matches found

OSV
OSV
added 2026/07/14 9:1 a.m.12 views

CVE-2024-7708

For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case for 100-Continue, but any request where the network is slow can leak...

7.5CVSS6.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.17 views

PT-2026-57981

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A buffer leak occurs during the processing of requests that contain a body when the system reads 0 bytes. This issue is especially prevalent with 100-Continue...

7.5CVSS5.3AI score0.00252EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
added 2026/07/03 12:0 a.m.32 views

CVE-2026-12932

A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers to cause a denial of service memory exhaustion via a flood of crafted packets...

8.1CVSS5.3AI score0.00417EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:11 a.m.9 views

net: tls: fix strparser anchor skb leak on offload RX setup failure

...

7.5CVSS6.1AI score0.005EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/26 3:10 p.m.15 views

CVE-2026-52962

A flaw was found in the Linux kernel, specifically within the Ceph file system's extended attribute handling. A buffer leak occurs in the cephsetxattr function because a previously allocated buffer oldblob is not properly released. This can lead to resource exhaustion over time, potentially causi...

7.8CVSS5.9AI score0.00139EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/26 2:19 a.m.15 views

SUSE CVE-2026-40211

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memo...

5.3CVSS6.1AI score0.00296EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/06/26 2:14 a.m.13 views

SUSE CVE-2026-52962

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

3.3CVSS6AI score0.00139EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2026/06/25 12:0 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2026-53102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: Fix memory leak after mt76connacmcuallocstareq mt76connacmcuallocstareq allocates an skb which is expected to be freed eventually by...

5.5CVSS5.9AI score0.00108EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/25 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-52962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the...

7.8CVSS5.8AI score0.00139EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/06/25 12:0 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-52974

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tls: fix strparser anchor skb leak on offload RX setup failure When tlssetdeviceoffloadrx fails at tlsdevadd, the error path calls tlsswfreeresourcesrx to...

7.5CVSS5.6AI score0.005EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/25 12:0 a.m.14 views

PT-2026-52383

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An attacker can send crafted DNS over HTTP/3 queries to trigger an exception that prevents a buffer from being freed immediately. While the buffer is eventually...

5.3CVSS5.7AI score0.00296EPSS
SaveExploits0References21
EUVD
EUVD
added 2026/06/24 6:32 p.m.9 views

EUVD-2026-38830

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

6AI score0.00139EPSS
SaveExploits0References9
NVD
NVD
added 2026/06/24 5:17 p.m.14 views

CVE-2026-52962

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

7.8CVSS0.00139EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/06/24 5:17 p.m.8 views

CVE-2026-52962

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

7.8CVSS5.6AI score0.00139EPSS
SaveExploits0References31
EUVD
EUVD
added 2026/06/24 4:30 p.m.19 views

EUVD-2026-38947

In the Linux kernel, the following vulnerability has been resolved: netsched: fix skb memory leak in deferred qdisc drops When the network stack cleans up the deferred list via qdiscrunend, it operates on the root qdisc. If the root qdisc do not implement the TCQFDEQUEUEDROPS flag the packets que...

5.7AI score0.001EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/24 4:30 p.m.10 views

CVE-2026-53079 net_sched: fix skb memory leak in deferred qdisc drops

In the Linux kernel, the following vulnerability has been resolved: netsched: fix skb memory leak in deferred qdisc drops When the network stack cleans up the deferred list via qdiscrunend, it operates on the root qdisc. If the root qdisc do not implement the TCQFDEQUEUEDROPS flag the packets que...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/06/24 4:28 p.m.8 views

CVE-2026-52962 ceph: fix a buffer leak in __ceph_setxattr()

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

6AI score
SaveExploits0References11
Cvelist
Cvelist
added 2026/06/24 4:28 p.m.39 views

CVE-2026-52962 ceph: fix a buffer leak in __ceph_setxattr()

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

0.00139EPSS
SaveExploits0References8
CVE
CVE
added 2026/06/24 4:28 p.m.30 views

CVE-2026-52962

The CVE refers to the Linux kernel Ceph driver: in __ceph_setxattr(), old_blob can retain ci->i_xattrs.prealloc_blob during a retry, and ceph_buffer_put() is not called for the old_blob, causing a buffer leak. A patch fixes this leak. Connected SUSE advisories (OSV entries) confirm this CVE (C...

7.8CVSS6AI score0.00139EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/24 4:28 p.m.8 views

CVE-2026-52962

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in cephsetxattr The oldblob in cephsetxattr can store ci-ixattrs.preallocblob value during the retry. However, it is never called the cephbufferput for the oldblob object. This patch fixes the issue of the...

5.9AI score0.00139EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder