ch.mobi.mobitor.plugins:mobitor-plugin-bitbucket (>=3.1.305, <=3.1.313), ch.mobi.mobitor.plugins:mobitor-plugin-dwh (>=3.1.305, <=3.1.313) +81 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-quic (>=0.0.14.final, <=0.0.20.final)

io.netty.incubator:netty-incubator-codec-quic MAVEN version =0.0.14.final, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2025-29908 Source advisory:...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity through the codec process. An attacker can cause a considerable CPU load on the server by initiating connections with colliding Source Connection IDs SCIDs. Remediation Upgrade...

app.cybrid:cybrid-api-bank-java (>=v0.16.1, <=v0.123.652), app.cybrid:cybrid-api-id-java (>=v0.16.1, <=v0.123.652) +819 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-classes-quic (>=0.0.21.final, <=0.0.70.final)

io.netty.incubator:netty-incubator-codec-classes-quic MAVEN version =0.0.21.final, =v0.16.1, =v0.16.1, =v0.16.1, =1.1.9, =17.16.0, =2.0.0, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.496 and more Source cves: CVE-2025-29908 Source advisory:...

ch.mobi.mobitor.plugins:mobitor-plugin-bitbucket (>=3.1.305, <=3.1.313), ch.mobi.mobitor.plugins:mobitor-plugin-dwh (>=3.1.305, <=3.1.313) +81 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-quic (>=0.0.14.final, <=0.0.20.final)

io.netty.incubator:netty-incubator-codec-quic MAVEN version =0.0.14.final, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.305, =3.1.313 and more Source cves: CVE-2025-29908 Source advisory:...

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

CVE-2025-29908

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

CVE-2025-29908

CVE-2025-29908 affects the Netty QUIC codec (netty-incubator-codec-quic) which uses quiche. The issue is a hash collision in the hash map that manages connections, allowing a remote attacker to induce a Hash DoS by initiating connections with colliding Source Connection IDs (SCIDs), causing consi...

CVE-2025-29908 Netty QUIC hash collision DoS attack

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

app.cybrid:cybrid-api-bank-java (>=v0.16.1, <=v0.123.652), app.cybrid:cybrid-api-id-java (>=v0.16.1, <=v0.123.652) +819 more potentially affected by CVE-2025-29908 via io.netty.incubator:netty-incubator-codec-classes-quic (>=0.0.21.final, <=0.0.70.final)

io.netty.incubator:netty-incubator-codec-classes-quic MAVEN version =0.0.21.final, =v0.16.1, =v0.16.1, =v0.16.1, =1.1.9, =17.16.0, =2.0.0, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.316, =3.1.496 and more Source cves: CVE-2025-29908 Source advisory: MEND:CVE-2025-29908...

USN-7397-1: AOM vulnerability

Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

CVE-2025-29908: Inefficient Algorithmic Complexity

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash collision vulnerability in the hash map used to manage connections allows remote attackers to cause a considerable CPU load on the server a Hash DoS attack by initiating connections...

PT-2025-13599

Name of the Vulnerable Software and Affected Versions Netty QUIC codec versions prior to 0.0.71.Final Description A hash collision vulnerability in the Netty QUIC codec allows remote attackers to cause a considerable CPU load on the server by initiating connections with colliding Source Connectio...

[SECURITY] Fedora 40 Update: ffmpeg-6.1.2-2.fc40

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

RLSA-2024:9827 Moderate: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Integer overflow in vpximgalloc CVE-2024-5197 For more details about the security issues, including the...

[SECURITY] Fedora 42 Update: ffmpeg-7.1.1-1.fc42

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

PT-2025-22202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak has been identified in the Linux kernel, specifically in the wcd937x soc codec probe function. This issue arises when snd soc dapm new controls or snd soc dapm ad...

[SECURITY] Fedora 41 Update: ffmpeg-7.1.1-1.fc41

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

ffmpeg:ffmpeg_AV_CODEC_ID_SVQ3_fuzzer: Heap-buffer-overflow in inflate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6343867775647744 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSVQ3fuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5110000000c3...

Linux Distros Unpatched Vulnerability : CVE-2023-52736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda: Do not unset preset when cleaning up codec Several functions that take part in codec's initialization and removal are re-used by ASoC codec drivers...