CVE-2021-21341

CVE-2021-21341 XStream DoS XStream 공식 발표 CVE-2021-21341 취약점 CVE-2021-21341: XStream에서 서비스 거부Denial of Service가 발생할 수 있습니다. 영향을 받는 버전 1.4.15 이하의 모든 버전이 기본 설정 그대로 사용될 경우 영향을 받습니다. XStream의 보안 프레임워크를 최소 필수 유형으로 제한된 화이트리스트로 설정할 것을 권고한 조치를 따른 사용자는 영향을 받지 않습니다. 설명 역직렬화unmarshalling 시 처리되는 스트림에는 이전에 작성된...

Pyison

Pyison Pyison은 AI 웹 크롤러를 위한 타르핏tarpit입니다 소개 모든 웹 크롤러와 마찬가지로 AI 봇은 웹 서버에서 페이지를 요청한 다음 페이지의 링크를 따라 다른 페이지로 이동합니다. 이렇게 하면 전체 웹사이트의 색인을 구축할 수 있습니다. 하지만 다른 웹 크롤러와 달리 AI 봇은 몇 가지 고유한 문제를 제기합니다. 서버 관리자는 웹 크롤러에게 크롤링해야 할 페이지와 크롤링하지 말아야 할 페이지를 알려주는 robots.txt 파일을 구성할 수 있습니다. 일부 AI 크롤러는 이 파일을 무시하는 것으로 밝혀졌습니다...

CVE-2026-89744

A flaw was found in the Linux kernel's device property handling. When the kernel iterates over child nodes of a firmware node fwnode that also has a secondary fwnode, the fwnodegetnextchildnode function can enter an endless loop. This occurs if the secondary fwnode has multiple children, causing...

Linux Distros Unpatched Vulnerability : CVE-2026-80641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 wifi: wlcore: Add support for IGTK ke...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: thrift (UTSA-2026-032286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-032286 advisory. In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had...

Astra Linux – Vulnerability in ntfs-3g

A properly crafted NTFS image with an unallocated bitmap can lead to an endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...

Astra Linux – Vulnerability in Thrift

In Apache Thrift, all versions up to and including 0.12.0, a server or client may encounter an infinite loop when processing specific input data. Since this issue was partially addressed in version 0.11.0, it only affects certain language bindings, depending on the installed version...

Astra Linux – Vulnerability in libproxy

In url.cpp within libproxy versions 0.4.x to 0.4.15, it is possible for a remote HTTP server to trigger uncontrolled recursion by sending a response that consists of an infinite stream without a newline character. This leads to a stack exhaustion issue...

CVE-2026-64369 s390: Revert support for DCACHE_WORD_ACCESS

In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...

TencentOS Server 2: freerdp (TSSA-2026:0751)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0751 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-54465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a T...

CVE-2026-54465

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server or to complement a WebSocket client, a peer can make a single connection consume an unbounded...

CVE-2026-54465

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server or to complement a WebSocket client, a peer can make a single connection consume an unbounded...

CVE-2026-53336

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

CVE-2026-53336

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

CVE-2026-53336

Summary of CVE-2026-53336 (Linux kernel nvmem driver) : The vulnerability occurs in the nvmem layouts: onie-tlv handling where an EEPROM entry with an unknown type can cause the driver to hang in an endless loop. The root cause is an infinite loop when encountering vendor-specific or unknown type...

CVE-2026-45802 FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service

FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion or a script...

Memory exhaustion in HTTP header parser

Impact If this library is used to implement a WebSocket server on top of a TCP server rather than an HTTP server or framework using the WebSocket::Driver.server method, or, if it is used to complement a WebSocket client, then a peer can make a single connection consume an unbounded amount of memo...

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

...

SUSE CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...