286 matches found
rsync: rsync: Denial of Service via crafted checksums during delta transfer
A flaw was found in rsync. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted checksum sequences during delta file transfers to a public rsync server. This flaw forces the server to perform excessive checksum computations across consecutive data offsets, leadi...
CVE-2026-108082
A flaw was found in symfony/http-foundation. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request containing headers with repetitive whitespace. Inefficient regular expression processing on these header values causes excessive CPU resource...
CVE-2026-119741
A flaw was found in rsync. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted checksum sequences during delta file transfers to a public rsync server. This flaw forces the server to perform excessive checksum computations across consecutive data offsets, leadi...
CVE-2026-61848
A flaw was found in crass. This vulnerability allows a remote attacker to cause a Denial of Service DoS through excessive CPU resource consumption. When parsing input containing non-ASCII characters, inefficiencies in tracking the positions of multi-byte characters result in disproportionately lo...
CVE-2026-119195
A flaw was found in pyasn1. A remote attacker can cause a Denial of Service DoS by providing specially crafted ASN.1 Abstract Syntax Notation One encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.4. It stems from improper handling of local work by iouring/cancel; when the ring associated with a task remains disabled, the system erroneously assumes the task is being submitted and spins waiting for it to run locally, which may cause...
CVE-2026-110871
A flaw was found in nodemailer. A remote attacker can trigger a Denial of Service DoS by submitting emails containing excessively long headers or large recipient lists that fold into numerous continuation lines. Inefficient header parsing in the message parser component leads to excessive CPU...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.win-arm64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.win-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the FormPipeRead...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.linux-musl-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the...
Inefficient Algorithmic Complexity
Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the FormPipeRead...
CVE-2026-107378
A flaw was found in CairoSVG. A remote attacker can cause a Denial of Service DoS by providing a specially crafted Scalable Vector Graphics SVG file containing paths with numerous segments. Inefficient path processing leads to excessive CPU resource consumption during rendering, causing the...
SUSE SLES15 Security Update : jawn (SUSE-SU-2026:4407-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4407-1 advisory. This update for jawn fixes the following issue: - CVE-2026-61814: quadratic rescan complexity in AsyncParser can cause excessive CPU resource exhaustio...
Rocky Linux 9 [CIQ] Security Update: python3.11 / python3.11-debug / python3.11-debuginfo / etc (crlsa-2025_3634)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253634 advisory. cpython: python: Uncontrolled CPU resource consumption when in http.cookies module CVE-2024-7592 Tenable has extracted the preceding description block directly from...
Rocky Linux 9 [CIQ] Security Update: python3.12 / python3.12-debug / python3.12-debuginfo / etc (crlsa-2025_3631)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253631 advisory. cpython: python: Uncontrolled CPU resource consumption when in http.cookies module CVE-2024-7592 Tenable has extracted the preceding description block directly from...
Security update for jawn
This update for jawn fixes the following issue: CVE-2026-61814: quadratic rescan complexity in AsyncParser can cause excessive CPU resource exhaustion bsc1282548. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4407-1 Security update for jawn
This update for jawn fixes the following issue: - CVE-2026-61814: quadratic rescan complexity in AsyncParser can cause excessive CPU resource exhaustion bsc1282548...
CVE-2026-63447
A flaw was found in Suricata. A remote, unauthenticated attacker can exploit this issue by sending specially crafted File Transfer Protocol FTP traffic containing large command sequences, causing the parser to allocate transactions beyond expected limits. Processing this oversized transaction lis...