6689 matches found
CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied Content-Length wit...
EEF-CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
Summary Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP inets httpc allows a malicious or compromised HTTP server to degrade availability by returning a numeric header whose value is a very long run of digits. httpchandler.erl converts the server-supplied...
PT-2026-84261
Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 17.0 through 27.3.4.16 Erlang/OTP versions 28.0 through 28.5.0.5 Erlang/OTP versions 29.0 through 29.0.5 Description Improper validation of input quantity in the eldap module allows a malicious or compromised LDAP server to...
Alibaba Cloud Linux 3 : 0259: resource-agents security update (Important) (ALINUX3-SA-2026:0259)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0259 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-59886: pyasn1 is a generic ASN.1 library f...
TencentOS Server 2: python-pyasn1 (TSSA-2026:0941)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0941 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
The vulnerability of the strtol() function in the su-exec utility allows a attacker to elevate their privileges to root and execute arbitrary code.
The vulnerability of the strtol function in the su-exec utility is related to incorrect conversion of numerical types. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute arbitrary code...
[SECURITY] [DLA 4765-1] expat security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 31, 2026 https://wiki.debian.org/LTS -...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
Debian dla-4765 : expat - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4765 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected]...
The vulnerability of XML components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created XML file...
The vulnerability of the CSS component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the Bindings component in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.
The vulnerability of the Bindings component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...
FreeBSD : Elixir -- Denial of service via uncontrolled recursion in charlist conversion (aac25935-f19d-4ac8-80fc-043365686a63)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aac25935-f19d-4ac8-80fc-043365686a63 advisory. tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a...
FreeBSD : Elixir -- Denial of service via uncontrolled recursion in charlist conversion (2ab3c852-d10a-4d68-be6b-80619116c33a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2ab3c852-d10a-4d68-be6b-80619116c33a advisory. tomciopp reports: Uncontrolled recursion in the Elixir standard library lets an attacker who controls a...