23784 matches found
CVE-2026-81880
radare2 , a UNIX-like reverse engineering framework, is affected by an uncontrolled resource consumption flaw in its Apple Preferred Executable Format (PEF) loader . Prior to 6.2.0 , the loader accepted relocSecCount values not bounded by the actual number of sections or complete relocation recor...
CVE-2026-81880 radare2: Uncontrolled resource consumption in radare2 PEF loader
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...
CVE-2026-81880
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...
CVE-2026-65112
The NVIDIA Infrastructure Controller for Linux is vulnerable to uncontrolled resource consumption , which may lead to a denial of service (DoS). The root cause is identified as CWE-400 . This vulnerability affects versions 0 to 1.9 on the Linux platform. To remediate this issue, users should upda...
EUVD-2026-84422
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-65112
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-65112
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-65115
The NVIDIA Infrastructure Controller for Linux is vulnerable to uncontrolled resource consumption, as identified in CVE-2026-65115 . This flaw, categorized under CWE-400 , allows an attacker to potentially cause a denial of service (DoS). The vulnerability affects versions 0 to 1.9 . To remediate...
EUVD-2026-84419
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...
CVE-2026-65115
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...
CVE-2026-65115
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...
undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...
undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...
Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by uncontrolled resource consumption vulnerabilities due to Apache Neethi (CVE-2026-66142, CVE-2026-66143, CVE-2026-66144)
Summary There is a vulnerability in the Apache Neethi library that affects IBM WebSphere Application Server Liberty with the jaxws-2.2, xmlWS-3.0, and xmlWS-4.0 enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
PT-2026-97003
Name of the Vulnerable Software and Affected Versions icalendar versions 6.1.0 through 7.2.1 Description The vInt.from ical function accepts an attacker-controlled VALARM REPEAT value. Applications requesting alarm times may eagerly expand this value without an application-level limit. This...
ROS-20260922-73-0103
The vulnerability in the 389-ds-base is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-96740
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
ROS-20260922-73-0034
The vulnerability in Grafana is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...