Lucene search
+L

327 matches found

OSV
OSV
added 2026/05/19 12:0 a.m.9 views

ALSA-2026:19358 Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP: Denial of service due to use-after-free vulnerability...

9.8CVSS6.6AI score0.00599EPSS
SaveExploits7References18
BDU FSTEC
BDU FSTEC
added 2026/05/18 12:0 a.m.8 views

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark, a traffic analyzer for computer networks, allows a hacker to cause a service failure.

The vulnerability of the OpenFlow v5 protocol analyzer used by Wireshark for analyzing computer network traffic involves executing a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits1References8Affected Software3
RedHat Linux
RedHat Linux
added 2026/05/13 4:43 a.m.11 views

freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/05/13 12:0 a.m.10 views

RHEL 8 : freerdp (RHSA-2026:16777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:16777 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

9.8CVSS6.5AI score0.00599EPSS
SaveExploits7References19
Tenable Nessus
Tenable Nessus
added 2026/05/13 12:0 a.m.9 views

RHEL 8 : freerdp (RHSA-2026:16814)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:16814 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...

9.8CVSS6.5AI score0.00599EPSS
SaveExploits7References19
BDU FSTEC
BDU FSTEC
added 2026/05/07 12:0 a.m.5 views

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, allows a hacker to cause a service failure.

The vulnerability of the USB HID protocol analyzer, a network traffic analyzer for computer networks, Wireshark, is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS5.9AI score0.0018EPSS
SaveExploits1References7Affected Software2
CVE
CVE
added 2026/05/01 2:15 p.m.24 views

CVE-2026-31784

CVE-2026-31784 affects the Linux kernel, specifically the drm/xe/pxp component. The issue arises in pxp_start where a restart flag is not cleared, causing the function to potentially loop back to the start after reaching the end. This has been resolved by cherry-picking a fix from commit 0850ec7b...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2026/04/28 7:43 a.m.22 views

FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit this vulnerability by sending a specially crafted RDP message. This can lead to an undefined behavior where a wrapped value is used as a shift exponent, causing an approximately ...

7.5CVSS4.8AI score0.00426EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/16 12:52 p.m.8 views

FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit this vulnerability by sending a specially crafted RDP message. This can lead to an undefined behavior where a wrapped value is used as a shift exponent, causing an approximately ...

7.5CVSS5.8AI score0.00426EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/02/25 10:16 p.m.8 views

CVE-2026-27951

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

7.5CVSS7.1AI score0.00346EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/02/25 9:7 p.m.45 views

CVE-2026-27951 FreeRDP has possible Integer overflow in Stream_EnsureCapacity

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, the function StreamEnsureCapacity can create an endless blocking loop. This may affect all client and server implementations using FreeRDP. For practical exploitation this will only work on 32bit systems whe...

5.3CVSS0.00346EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/18 4:16 a.m.5 views

AZL-78203 CVE-2026-27171 affecting package zlib 1.2.13-2

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

5.5CVSS5.7AI score0.00218EPSS
SaveExploits1References1
CVE
CVE
added 2026/02/14 4:27 p.m.38 views

CVE-2026-23197

The CVE-2026-23197 issue affects the Linux kernel i2c_imx driver: when a block read returns an invalid length (not in range), the length handler sets IMX_I2C_STATE_FAILED, but i2c_imx_master_isr() overwrites it with IMX_I2C_STATE_READ_CONTINUE, causing an endless read loop that overruns buffers a...

5.5CVSS5.2AI score0.001EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/14 4:27 p.m.5 views

CVE-2026-23197

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a block read returns an invalid length, zero or I2CSMBUSBLOCKMAX, the length handler sets the state to IMXI2CSTATEFAILED. However, i2cimxmasterisr unconditionally...

5.1AI score0.001EPSS
SaveExploits0References3Affected Software1
Redos
Redos
added 2026/01/14 12:0 a.m.8 views

ROS-20260114-7318

A vulnerability in the iomapwritedelallocscan function of the Linux kernel is related to the execution of a loop with an unreachable exit condition as a result of numeric truncation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS8.7AI score0.00202EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.6 views

Astra Linux - уязвимость в curl

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS...

7.5CVSS6.9AI score0.01287EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-7985

Malware in sbrugna...

7.5CVSS4.8AI score0.0192EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-5457

Malware in sbrugna...

7.5CVSS7.5AI score0.02169EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-9071

Malware in sbrugna...

5.5CVSS5.3AI score0.0037EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-7641

Malware in sbrugna...

6.5CVSS7.8AI score0.01227EPSS
SaveExploits0References15
Rows per page
Query Builder