17550 matches found
CVE-2025-26466 Openssh: denial-of-service in openssh
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to ...
OESA-2025-1212 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink siz...
OESA-2025-1210 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink siz...
OESA-2025-1211 uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fwprintenv and fwsetenv programs to read and modify U-Boot's environment. Security Fixes: An integer overflow in sqfsinodesize in Das U-Boot before 2025.01-rc1 occurs in the symlink siz...
CVE-2024-54170
IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an inefficient complexity that consumes excessive CPU cycles...
Security Bulletin: Vulnerability in Apache Lucene affects watsonx.data
Summary Apache Lucene is vulnerable to a denial of service attack and could affect watsonx.data. Vulnerability Details IBM X-Force ID: 216835 DESCRIPTION: Apache Lucene is vulnerable to a denial of service. By sending a specific regular expression query, a remote attacker could exploit this...
SUSE CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in HTTP/2 protocol
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of HTTP/2 protocol Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited i...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Node.js jose module
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Node.js jose module Vulnerability Details CVEID:CVE-2024-28176 DESCRIPTION: Node.js jose module is vulnerable to a denial of service, caused by a flaw during JWE Decryption operations. By sending a specially crafted reques...
Security Bulletin: Vulnerability in idna affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2024-3651]
Summary The idna package is used by IBM Cloud Pak for Data System 2.0 . IBM Cloud Pak for Data System 2.0 has addressed the applicable CVEs CVE-2024-3651. Vulnerability Details CVEID:CVE-2024-3651 DESCRIPTION: idna could allow a local user to cause a denial of service using a specially crafted...
AZL-57450 CVE-2025-22868 affecting package blobfuse2 for versions less than 2.1.2-8
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
DEBIAN-CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
AZL-57389 CVE-2025-22868 affecting package telegraf for versions less than 1.31.0-7
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2022-49052
In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONEVM cloning, user process can be corrupted by seeing zeroed page unexpectedly. CPU A CPU B doswappage doswappage SWPSYNCHRONOUSIO path SWPSYNCHRONOUSIO...
CVE-2025-22868 Unexpected memory consumption during token parsing in golang.org/x/oauth2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868 Unexpected memory consumption during token parsing in golang.org/x/oauth2
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CVE-2025-22868
CVE-2025-22868 is confirmed across connected feeds as a memory‑consumption DoS in token parsing caused by a malformed token in a Go oauth2/token path. The Astra Linux bulletin ties this to golang-golang-x-oauth2, and CBLMariner notes affected moby-engine versions below 25.0.3-11 with a patched re...
