Lucene search
K

4 matches found

RubySec
RubySec
added 2026/04/02 12:0 a.m.8 views

Rack has quadratic complexity in Rack::Utils.select_best_encoding via wildcard Accept-Encoding header

Summary Rack::Utils.selectbestencoding processes Accept-Encoding values with quadratic time complexity when the header contains many wildcard entries. Because this method is used by Rack::Deflater to choose a response encoding, an unauthenticated attacker can send a single request with a crafted...

7.5CVSS6.5AI score0.01996EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/02/10 4:15 p.m.5 views

DEBIAN-CVE-2025-21693

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS5.7AI score0.00191EPSS
Exploits0References1
OSV
OSV
added 2025/02/10 4:15 p.m.10 views

AZL-58989 CVE-2025-21693 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

7.8CVSS6.7AI score0.00191EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/01/01 12:0 a.m.6 views

PT-2025-8095

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the btrfs file system. The issue occurred during compressed reads, where the bio would be double completed on errors,...

5.5CVSS5.8AI score0.00237EPSS
Exploits0References21
Rows per page
Query Builder