CVE-2026-26445

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445

The stomper 5e2741e message broker is vulnerable to a Denial of Service (DoS) attack. A remote attacker can exploit this by sending partial STOMP (Streaming Text Oriented Messaging Protocol) frames while maintaining open TCP connections. Due to the broker's use of edge-triggered epoll (EPOLLET) a...

CVE-2026-26445: Allocation of Resources Without Limits or Throttling

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-46015: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tcp: call skdataready after listener migration When inetcsklistenstop migrates an established child socket from a closing listener to another socket in the same SOREUSEPORT group, the target listener gets a new accept-queue entry...

Fedora 40 : libuev (2024-40fbf3ee48)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-40fbf3ee48 advisory. Security fix for CVE-2022-48620 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2024-26606

In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In epoll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDERWRITEREAD without a read buffer...

CVE-2024-26606 binder: signal epoll threads of self-work

In the Linux kernel, the following vulnerability has been resolved: binder: signal epoll threads of self-work In epoll mode, threads often depend on I/O events to determine when data is ready for consumption. Within binder, a thread may initiate a command via BINDERWRITEREAD without a read buffer...

openSUSE 15 Security Update : libuev (openSUSE-SU-2024:0023-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0023-1 advisory. - uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number. CVE-2022-48620 Note that Nessus has not tested for this...

SUSE CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

UBUNTU-CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

Buffer overflow

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

CVE-2022-48620

CVE-2022-48620 affects libuev (uev) up to version 2.4.1, with a possible buffer overflow in uev_run() triggered by a large maxevents in epoll_wait. Debian 11 LTS has fixed this in 2.3.1-1+deb11u1, and Fedora advisories indicate a security update addressing the CVE, though a specific patched versi...

CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

CVE-2022-48620: Buffer Copy without Checking Size of Input

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

CVE-2022-48620

uev aka libuev before 2.4.1 has a buffer overflow in epollwait if maxevents is a large number...

Ubuntu: Security Advisory (USN-3082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...